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No-cloning theorem is fundamental for quantum mechanics and for quantum information science 
that states an unknown quantum state cannot be cloned perfectly. However, we can try to clone a 
quantum state approximately with the optimal fidelity, or instead, we can try to clone it perfectly 
with the largest probability. Thus various quantum cloning machines have been designed for 
different quantum information protocols. Specifically, quantum cloning machines can be designed 
to analyze the security of quantum key distribution protocols such as BB84 protocol, six-state 
protocol, B92 protocol and their generalizations. Some well-known quantum cloning machines 
include universal quantum cloning machine, phase-covariant cloning machine, the asymmetric 
quantum cloning machine and the probabilistic quantum cloning machine etc. In the past years, 
much progress has been made in studying quantum cloning machines and their applications and 
implementations, both theoretically and experimentally. In this review, we will give a complete 
description of those important developments about quantum cloning and some related topics. On 
the other hand, this review is self-consistent, and in particular, we try to present some detailed 
formulations so that further study can be taken based on those results. In addition, this review 
also contains some new results, for example, the study of quantum retrodiction protocol. 
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I. INTRODUCTION 



In the past years, the study of quantum computation and quantum information has been attracting much atten- 
tion from v arious research communities. Quantum information processing (QIP) is based on principles of quantum 
mechanics ([Nielsen and Ch uang. 2000). It promises algorithms which may surpass their classical counterparts. One 
of those algorithms is Shor alg orithm (IShori. Il994l) wh ich can factorize large number exponentially faste r than the ex- 
isting classical algorithms do dEkert and Jozsa . Il996l ). In this sense, the RSA pubhc key cryptosystem ( Rivest et al\ . 
Il978l ) widely used in modern financial systems and networks might be attacked easily if a quantum computer exists, 
since the security of RSA system is based on assumption that it is extremely difficult to factorize a large number. On 
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the other hand, QIP pr ovides an unconditional secu re quantum cryptography based a principle of quantum mechan- 
ics, no-cloning theorem (|Wootters and Zurekl [l983) . which means that an unknown quantum state cannot be cloned 
perfectly. 

For comparison, in classical information science, we use bit which is either "0" or "1" to carry the information, while 
for quantum information, a bit of quantum information which is named as "qubit" is encoded in a quantum state 
which may be a superposition of states |0) and For example, a general qubit takes the form a|0) -f (3\l), where 
parameters a and /3 are complex numbers according to quantum mechanics and are normalized as |Q;p-|-|/3p = 1. So a 
qubit can collapse to either |0) or |1) with some probability if a measurement is performed. The classical information 
can be copied perfectly. We know that we can copy a file in a computer without any principal restriction. On the 
contrary, QIP is based on principles of quantum mechanics, which is linear and thus an arbitrary quantum state 
cannot be cloned perfectly since of t he no-cloning theorem. We use generally terminology "clone" instead of "copy" 
for reason of no-cloning theorem in ()Wootters and Zureklll983 ). No-cloning, however, is not the end of the story. 

It is prohibited to have a perfect quantum clone. It is still possible that we can copy a quantum state approximately 
or probabilistically. There are various quantum protocols for QIP which may use tool of quantum cloning for different 
goals. Thus various quantum cloning machines have been created both theoretically and experimentally. The study 
of quantum cloning is of fundamental interest in QIP. Additionally, the quantum cloning machines can also be applied 
directly in various quantum key distribution (QKD) protocols. The first quantum k ey distribution protoco l prop osed 
by Bennett and Brassard in 1984 (BB84) uses four different qubits, BB84 states (iBennett and Brassar di |1984[ ). to 
encode classical information in transmission. Correspondingly, the phase-covariant quantum clone machine, which can 
copy optimally all qubits located in the equator of the Bloch sphere, is proved to be optimal for cloning of states similar 
as BB84 states. The BB84 protocol can be extended to six-state protocol, the corresponding cloning machine is the 
universal quantum cloning machine whic h can copy opt imally arbitrary qubits. Similarly the probabilistic quantum 
cloning machine is for B92 QKD protocol ( Bennetti . ll992l ). Quantum cloning is also related with some fundamentals in 
quantum information science, for example, the no-cloning theorem is closely related with no-signaling theorem which 
means that superluminal communication is forbidden. We can also use quantum cloning machines for estimating a 
quantum state or phase information of a quantum state. So the study of quantum cloning is of interest for reasons of 
both fundamental and practical applications. 

The previous well-acce pted reviews of quantum cloning can be found in ( Scarani et all . 120051 ). and also in 
( Cerf and Fiurasekl |2006[ ). Quantum cloning, as other topics of quantum information, developed very fast in the 
past years. An up-to-date review is necessary. In the present review, we plan to give a full description of results about 
quantum cloning and some closely related topics. This review is self-consistent and some fundamental knowledge 
is also introduced. In particular, a main characteristic of this review is that it contains a large number of detailed 
formulations for the main review topics. It is thus easy to follow those calculations for further study about those 
quantum cloning topics. We also incorporate some unpublished new results into this review so that it is worth for 
experts of quantum cloning to have a look of those new ideas. 

The review is organized as follows: In the next part of this section, we will present in detail some fundamental 
concepts of quantum computation and quantum information including the form of qubit represented in Bloch sphere, 
the definition of entangled state, some principles of quantum mechanics used in the review. Then we will present 
in detail the developments of quantum cloning. Here let us introduce briefly some results contained in this review. 
In Section II, we will review several proofs of no-cloning theorem from different points of view, including a simple 
presentation, no-cloning for mixed states, the relationship between no-cloning and no-signaling theorems for quantum 
states, no-cloning from information theoretical viewpoints. In Section III, we will review the universal quantum cloning 
machine. We will present the universal quantum cloning machine for qubit and qudit including both symmetric and 
asymmetric cases. We then will present a unified quantum cloning machine which can be easily reduced to several 
universal cloning machines. We will also show some schemes for cloning of mixed states. We will show that the 
universal quantum cloning machine, by definition, can copy arbitrary input state, is necessary for a six-state input 
which are used in QKD. Further, the universal cloning machine is necessary for a four-state input which is the minimal 
input set. In Section V, the phase-covariant quantum cloning machines will be presented. One important application 
of this cloning machine is to study the well-known BB84 quantum cryptography. The phase-covariant quantum cloning 
machines include the cases of qubit and of higher dimension. In particular, a unified phase-covariant quantum cloning 
machine will be presented which can be adjusted for an arbitrary subset of the mutually unbiased bases. We can also 
show that the minimal input for phase-covariant quantum cloning is a set of three states with equal phase distances in 
the equator of Bloch sphere. The phase-covariant quantum cloning is actually state-dependent, we thus will present 
some other cases of state-dependent quantum cloning. 

In section IX, the security analysis of QKD based on mean king retrodiction protocol will be presented. The main 
results in this section are new. 

In section X, we present some detailed results of sequential quantum cloning which are not published before. 

In order to have a full view of all developments in quantum cloning and some closely related topics, we try to review 
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FIG. 1 (color online). A qubit in Bloch sphere, \tp) = cos||0) + sin |e*'''|l), it contains amplitude parameter 6 and phase 
parameter 0. 

some references briefly in one to two sentences. Those parts are generally named as 'other developments and related 
topics'. Our aim is to cover as much as possible these developments in quantum cloning, but we understand that 
some important references might still be missed in this review. 



A. Quantum information, qubit and quantum entanglement 

We have a quantum system constituted by two states |0) and They are orthogonal, 

(Oil) =0. 



(1) 



Those two states can be energy levels of an atom, photon polarizations, electron spins, Bose-Einstein condensate with 
two intrinsic freedoms or any physical material with quantum properties. In this review, we also use some other 
standard notations |0) — \ t)Jl) — I i) a-nd exchange them without mentioning. Simply, those two states can be 
represented as two vectors in linear algebra. 



|0) 



ID 



(2) 



Corresponding to bit in classical information science, a qubit in quantum information science is a superposition of 
two orthogonal states. 



= a|0)+/3|l). 



where a normalization equation should be satisfied. 



1. 



(3) 
(4) 



Here both a and /3 are complex parameters which include amplitude and phase information, a = |a|e*"^° and /3 — 
|/3|e*"^'^. So a qubit 1-0) is defined on a two-dimensional Hilbert space . In quantum mechanics, a whole phase 
cannot be detected and thus can be omitted, only the relative phase of a and j3 is important which is ^ = — (/>^. 
Now we can find that a qubit can be represented in another form. 



10) =cos-|0)+sin-e*^|l), 

where 9 & [0, tt], G [0, 27r}. It corresponds to a point in the Bloch sphere, see FIG. [T] 
The two qubits in separable form can be written as, 

\m) = (a|0)+/?|l))(7|0)+,S|l)) 

= a7|00) +a(5|01) +,37|10) +a(5|ll). 

If those two qubits are identical, one can find, 

|^)»2 ^ (a|0)+/3|l))(a|0)+/3|l)) 

= a2|00) + V2a/3^(|01) + |10)) + /32|ll). 
v2 



(5) 



(6) 



(7) 
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For convenience, we write the second term as a normalized symmetric state --i=(|01) + |10)) which will be used later. 
For two-qubit state, besides those separable state, we also have the entangled state, for example, 

|$+)^i=(|00) + |ll)). (8) 

This is state cannot be written as a product form like \tp)\(l>), so it is "entangled". It is actually a maximally entangled 
state. In quantum information science, quantum entanglement is the valuable resource which can be widely used in 

various tasks and protocols. Complementary to entangled state 1*1'"''), we have other three orthogonal and maximally 
entangled state which constitute a complete basis for (g) C^. Those four states are Bell states, here we list them all 
as follows, 









(9) 


1$-) ^ 




111)), 


(10) 
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|10)). 


(12) 



Those four Bell states can be transformed to each other by local unitary transformations. 
Consider three Pauli matrices defined as, 

= ( ? i ) , f^j/ = { ? n ) ' = { i ) • (13) 



^ 1 y ' y \i J ' V -1 , 

Since ay = iaxCfz, if the imaginary unit, "i", is the whole phase, we sometimes use UxCFz instead of ay. Bear in mind 




that we have |0) = ( i ) , and (0| = (1,0), so in linear algebra, we have the representation. 



|0)(0|=( J) (1,0)= f J I ). (14) 



y ^ V 

Now three Pauli matrices have an operator representation, 

a, = |0)(1| + |1)(0|, (15) 
ay = -z|0)(l|+z|l)(0|, (16) 
a. = |0)(0|-|1)(1|. (17) 

In this review, we will not distinguish the matrix representation and the operator representation. Acting Pauli 
matrices ax and a^ on a qubit, we find, 

a,|0) = |l), (7,|1) = |0), (18) 

fTz|0) = |0), a,|l) = -|l), (19) 

which are the bit flip action and phase flip action, respectively, while Uy will cause both bit flip and phase flip for a 
qubit. In this review, for convenience, we sometimes use; notations X = ax,Z = az to represent the corresponding 
Pauli matrices. Also, those Pauli matrices can also be defined in higher dimensional system, while the same notations 
might be used if no confusion is caused. 

For four Bell states, their relationship by local transformations can be as follows, 

1$-) = (7®c7,)|$+), (20) 
|*+) = (/^a,)|$+), (21) 
I*-) = {I®axaz)\^+), (22) 



where / is the identity in C^, the Pauli matrices are acting on the second qubit. 
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Here we have already used the tensor product. Consider two operators, Oi = ( ^ ) ' ~ ( C*^ ' ' 



tensor product Oi O2 is defined and calculated as follows 



A1O2 B1O2 

C1O2 D1O2 

/ A1A2 A1B2 B1A2 B1B2 \ 

A1C2 A1D2 B1C2 B1D2 

C1A2 C1B2 D1A2 D1B2 

\C1C2 C1D2 D1C2 D1D2) 



(23) 



When we apply a tensor product of, 0\®02, on a two-qubit quantum state, operator 0\ is acting on the first qubit, 
operator O2 is acting on the second qubit. 

We have already extended one qubit to two-qubit state. Similarly, multipartite qiibit state can be obtained. Also we 
may try to extend qubit from two-dimension to higher-dimensional system, generally named as "qutrit" for dimension 
three and "qudit" for dimension d in more general case, the Hilbert space is extended from to C^. For example, 
we sometimes have "qutrit" when we consider a quantum state in three dimensional system. For more general case, 
a qudit is also a superposed state, 

\^)=Y.x^\j), (24) 

where Xj,j = 0, — 1, are normalized complex parameters. Quantum entanglement can also be in higher 

dimensional, multipartite systems. 

A qubit 1'^) can be represented by its density matrix, 



(a|0)+^|l))(a*(0|+/3*(l| 

|a|2 a(3* 
a*f3 |/3|2 



(25) 



However, a general qubit may be not only the superposed state, which is actually the pure state, but also a mixed 
state which is in a probabilistic form. It can only be represented by a density operator p, 



P 



where pj is the probabilistic distribution with ^ ^■ 

A density matrix is positive semi-definite, and its trace equals to 1, 

p > 0, Trp = 1. (27) 

The density matrices of a pure state and a mixed state can be easily distinguished by the following conditions, 

Trp2 = 1. pmc state; (28) 
Trp2 < 1, mixed state. (29) 



For multipartite state, one part of the state is the reduced density matrix obtained by tracing out other parts. For 

ab) 



example, for two-qubit maximally entangled state l^'Ji^) constituted by A and B parts, each qubit is a mixed state, 



PA = TrB\^\s){^\B\ = ll- (30) 

This case is actually a completely mixed state. The density operator can be written as any pure state and its 
orthogonal state with equal probability, 

PA = i/-^|^)(VI + ^IV'^)(^^|, (31) 
where if = a\0) + its orthogonal state can take the form, 

|t/'^)=nO)-a*|l), (32) 

where * means the complex conjugation. 
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B. Quantum gates 

In QIP, all operations should satisfy the laws of quantum mechanics such as the generally used unitary transfor- 
mation and quantum measurement. Similar as in classical computation, all quantum computation can be effectively 
implemented by several fundamental gates. The single qubit rotation gate an d controUed-NOT (C NOT) gate consti- 
tute a complete set of fundamental gates for universal quantum computation ( Barenco et aLl . ll995l ). The single qubit 
rotation gate is just a unitary transformation on a qubit, R{'&), defined as 

R{^)\0) = cosi9|0) +e''^sini9|l), 

i?(i9)|l> = -e-'''^sini?|0) +cosi?|l), (33) 

where the phase parameter should also be controllable. The CNOT gate is defined as a unitary transformation on 
two-qubit system, one qubit is the controlled qubit and another qubit is the target qubit. For a CNOT gate, when 
the controlled qubit is |0), the target qubit does not change; when the controlled qubit is |1), the target qubit should 
be flipped. Explicitly it is deflned as. 



CNOT 
CNOT 
CNOT 
CNOT 



^ |0)|0) 
|0)|1)^|0)|1) 

|i)|o)-^|i)|i) 

|1>|1>^|1>|0), 



(34) 



where the first qubit is the controlled qubit and the second qubit is the target qubit. By matrix representation, CNOT 
gate takes the form, 



CNOT 



/ 1 

10 

1 

VO 1 0. 



(35) 



Depending on physical systems, we can use different universal sets of quantum gates to realize the universal quantum 
computation. 



8 



II. NO-CLONING THEOREM 

A. A simple proof of no-cloning theorem 

For classical information, the possibility of cloning it is an essential feature. In classical systems, cloning, in other 
words, copying seems no problem. Information stored in computers can be easily made several copies as backup; the 
accurate semiconservative replication of DNA steadily passes gen e information between gene rations. But for quantum 
systems, this is not the case. As proved by Wootters and Zurek ( Wootters and Zureklll982}) . deterministic cloning of 



pure states is not possible. After this seminal work, much interest has been shown in extending and generalizing th e 
original no-cloning theorem (|Barnum et all Il996t ILuoI . l2010bt iLuo all 120091: iLuo and Su^ . I2OIOI: iPiani et all 120081) , 



which gives us new insight to boundaries of the classical and quantum. On the other hand, no-signaling, guaranteed 
by Einstein's theory of relativity, is also delicately preserved by no-cloning. This chapter will focus on these topics, 
hoping to give a thorough description of the no-cloning theorem. 

As it is known, a single measurement on a quantum system will only reveal minor information about it, but as 
a result of which, the quantum system will collapse to an eigenstate of the measurement operator and all the other 
information about the original state becomes lost. Suppose there exists a cloning machine with a quantum operation 
U, which duplicates an arbitrary pure state 

U(\(f) (E) \R) (E) |Af>) = \(f) (g) |(^) (g) \M{(f)) (36) 

here \ip) denotes an arbitrary pure state, \R) an initial blank state of the cloning machine, \M) the initial state 
of the auxiliary state(ancilla), and M{(p)) is the ancillary state after operation which depends on \lp). With such 
machine, one can get any number of copies of the original quantum state, and then complete information of it can be 
determined. However, is it possible to really build such a machine? No-cloning theorem says no. 

THEOREM : No quantum operation exist which can perfectly and deterministically duplicate a pure state. 

The proof comes in 2 ways. 

(1). Using the l ineari ty of quantum mechanics. This proof is first proposed by Wootters and Zurek 
( Wootters and Zurekl Il982f). Suppose there exists a perfect cloning machine that can copy an arbitrary quantum 



state, that is, for any state \ip) 

M^}\M}^\^}MMiip)) 

where |E) is a blank state, and |M) is the state of auxiliary system(ancilla). Thus for state |0) and we have 

|0)|E)|M)^|0)|0)|M(0)), 

|1)|E)|M)^.|1)|1)|M(1)) 

In this way, for the state \tp) — a\0) + /3|1) 

(a|0) +/3|1))|E)|M) ^ a|00)|M(0)) +/?|11)|M(1)) 

On the other hand, \tp) itself is a pure state, so 

|V')|S)|M) ^ (a^lOO) + a/3|01) + al3\W) + M{ij)). 

Obviously, the right hand sides of the two equations cannot be equal, as a result, the premise is false that such a 
perfect cloning machine exists, which concludes the proof. 

(2) . Using the properties of unitary operation. This proof can be found in Sec. 9-4 of Peres's textbook! Peresl 



1X9951 ). Consider the process of cloning machine as a unitary operator U, then for any two state \ip) and \ip), since 
under unitary operation the inner product is preserved, we have 



2 



So {ip\ip) is either or 1. If the value is 0, it means the two states being copied should be orthogonal, while if 1, the 
two states are the same. 
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B. No-broadcasting theorem 

Following the no cloning theorem for pure states, the impossibility of cloning a mixed state is later proved by 
Barnum et al. ( Barnum et aLl . ll996l) . In fact, rather than cloning, broadcasting, whose meaning will be presented 



later in this section, is prohibited by quantum mechanics. Correlations, as a fundamental theme of science, is also 
studied in quantum syste ms. An elegant no local broadcasting theorem for correlations in a multipartite state is 
proposed by Piani et al. ( Piani et all . l2008l ). With these two no-broadcasting theorems, it is natural to ask what 



is the relationship between them. Recently Luo et al. have established the no-unilocal broadcasting theorem for 
quantum correlations, which proves to be the bridge between Barnum's and Piani's theorems and with it we are able 
to build the equivalence between them. The three theorems together would give us a unified picture of no-broadcasting 
in quantum systems. 

We shall first elabora te on the original no-broadcasting theorem for non-commuting states proposed by Barnum et 
a/.( Barnum et a/.l . ll996l) . Suppose there are two parts A and B of a composite quantum system AB, A is prepared in 



one of the states {ui}, while B is prepared in the blank state t. If there exists a quantum operation £ which can be 
performed on system AB, that is, Ufe r £{(Jk (E)t) = p™* and the output state satisfies 

TiaPr' = ^fc and Trbpr* = <^k, Vfc, 

we say £ broadcasts the set of states {en}, notice that we have not considered the ancilla, which will not affect 
generality since it will be traced o ut in computation , so we won't introduce the ancilla in the following text as well. 
Here comes Barnum's theorem ()Barnum et all . Il996l) 

Theorem 1. A set of states {tTi} is broadcastable if an d only if the states commute with each othe r. 

Several kinds of proof for Theorem 1 have been found (i Barnum et ail . l2007l ll996; 'Kalev and Hen', '2008*; iLindbladl . 
[1999) ■ one of them is provided as follows using the property of relative entropy (Kalev and Hen, 2008). We shall only 
prove Theorem 1 in the case that the set {ci} only have two states CTi and (T2; from which more complex cases can be 
easily extended to. 
Proof for Theorem 1 

1) "if" part: since ui and a2 commute, they can be expressed in the same orthonormal basis 



cTfc = ^ A/c,i|i)(i|, fc = l,2. 

i 

Because is an orthonormal set, it can be cloned by an operator £, so we get 



= £((Tfe (g) r) = ^ Afc,i|M)(ii|, A: = l,2, 

i 

thus 

Trapr* = ^k, Tr.pr* = ^k, k ^ 1, 2. 

So we see cti and CT2 are broadcasted by £. 

2) "only if" par t: first we shall introduce th e concept of relative entropy. The relative entropy S of pi with respect 
to p2 is defined as( Umegaki and KodaillT962l ) 



S{pi\p2) = Tr[pi(lnpi - lnp2)]- 



When fcer(pi)^ Pi fcer(/92) = 0, S is well-defined, otherwise S leads to oo ( Wehrll . [l978() . We first consider the case 



ker{p2) C ker{pi), then S < oo. Denote Sin = cti (g) r and S2n = (J2® we get 

'S'(Pi"|P2") = Tr[cri (g) T(log CTi ® log r - log (72 ® log r] 
= Tra[cri(logcri - log(T2)]TrfcT 

= Tra[(Ti(l0gCTi - log (72)] 
= S'((7i|(72). 

Because for any quantum operation £, S{£{pi)\£{p2)) — S{pi\p2), we have 

S[a^\a2) ^ S[pT\pT) ^ S{pT'\pT')- 
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Next we invoke the monotonocity of relative entropv ( jLindbladl . Il975l) 

S{pt\pt) > S{p1\pI), 

where p\ denotes the reduced density matrix of the composite system p1^, and the equahty holds if and only if the 
following condition is satisfied: 

log pf - log pf = r ® (logp? - logp^). 

So we have 

5(pr*ipr)>^(pt'°"*iP2'°"*), (37) 

for k=a,b where p^'^^^ denotes Tra[b)Pi^^ • The equahty holds if and only if 

bout 1 out /I a. out 1 a.out\ ^ rb 

g - log pg"' = (log Pi - log P2 )<»I 

ra /I b.out i b,out\ 

= r®(iogpi' -iogP2 )• 

Under the broadcasting condition, we get 

logpr* - logpr* = (log'Ti - logaz) <E> I' 
= /° (K) (logCTi - log 0-2)- 

But the above equation holds only when ai and (72 are diagonal or they can be diagonalized in the same basis, which 
means they commute. 

For the case S{ai\a2) = 00, we consider a mixed state amix — Aai + (1 — A)tT2, where < A < 1. If cti and 172 can 
be broadcast, then so can be ui and amix, due to linearity of the operation. But ker{amix) Q ker{ai), thus ai and 
^mix commute, so cri and CT2 commute. Now we have finished the proof of Theorem 1. 

C. No-broadcasting for correlations 

The quantum entanglement differs quantum world from classical world. Recently, it is also realized that quantum 
correlation, which may be beyond the quantum entang lement, is also important for QIP. Here we can first make a 
classification of states by correlation(Pi ani et all [20081 ). For a bipartite state p"'' shared by two parties A and B, it 
is called separable if it can be decomposed as 

p'^^ = s,p,p^"®p5, 

where {pj} denotes a probability distribution, {p^} and {p^} denote states of party a and b. Otherwise, the p"** is 
called entangled. 

If p"'' can be further decomposed as 

p-' = -E,p,\i}{z\^pl 

with {pi} denoting a probability distribution, {\i)} a orthonormal set of party a and {p^} states of party b, we say it 
is classical-quantum. 

If p^ can also be represented in an orthonormal set which makes 

p'"' = S,p,,|z)(»|® |j)0-|, 

where {pij} represents a probability distribution for two variables, we say it is classical(or classical-classical). 
As we know the correlation in p'^^ can be quantified by mutual information 

lip'^') = Sip'') + Sip") - Sip'^"), 

where S denotes the von Neumann entropy, that is, S{p) = — Tr(plnp). 

We say the correlation in p"^ is locally broadcast if there exists two quantum operations : S{H"') (8)-ff°^) 
and : S{H^) S{H^^ (g) H^^), here S{H) denotes the set of quantum states on Hilbert space H, such that 



11 



pah _^ (£-0 (g,£f>)pa& = paia2bib2^ g^j^^ ^j^g amouiit of Correlations in the two reduced states = Tra^baP"'""^''" and 
pQ2b2 = rp^^^^^^ai 026162 is identical to which of p'^'', that is 

While suppose there is a quantum operation f performed on party a, and we get {£"• (g) I^)p^'-^ — p'^i'^^b^ gg^y j^jj^g 
correlation in p°'^ is locally broadcast by party a if 

where p^i'' = Tra^p^i''^^^ and p"^'' = TraiP^i''^^^ 

With the above definition, we can then state no-broadcasting theorems for correlation proposed by Piani et al. and 
Luo et al. 

Theorem 2: The correlation in a bipartite state can be locally broadcast if and only if the state is classical. 
Theorem 3: The correlation in the bipartite state can be locally broadcast by party a if and only if p"^ is 
classical-quantum. 



D. A unified no-cloning theorem from information theoretical point of view 

Now we shall bui ld equivalence among the theorems according to the method proposed by Luo et gZ.l Luol . boiObt 
iLuo and Sunl . l2010[ ). that is, 

Theorem 1 <^ Theorem 2 Theorem 3. 

First we shall establish a lemma. 

Lemma 1: Any bipartite state can be decomposed as 

A: 

where each is non-negative and {X^.} forms a linearly independent set. 

Proof: Let {Y^} be a linearly independent set for party a, {^^} a linearly independent set for party b. Then any 
bipartite state p"*" can be decomposed in the basis {Y^ ® Z^}, that is 

Obviously we can let Z'j. — XjkYj" and obtain 

p'^'^Y.^k^^'k- (38) 



Notice that need not to be non- negative, so we have not arrived at Lemma 1 yet. Starting from (|38)) . we take a 
fixed \y) e such that 

Cl = {y\zl\y) + 0, 

let Cfc = (j/|Z^|y), we can write p°'^ as 

p'^'' = Y^Zl®Zl 

k 

= Y^zi®zl + Y,'fzi®z'i-Y,zi®'fzl 

k k^l k=jtl ^ 

= {z'^ + ^ ^±zt) ®zl + Y, zt ® [zt "-^zX) 
= XI ®z\^Y. ® zl 

where X- = + t^fc ^^^^ Zl^Zl- f^Z\ 



7b 
'k^ 
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Because for any k, 

{y\Zl\y) = {y\{Zl - "-^ZlM ^ c, - '±c, = 0, 

together with the non- negative property of density operator /?^^,we have for any \x) G 

{x y\p^'\x ^y)^ {x\X^\x){y\Zl\y) + J2{^\Z^\^){y\Zl\y) 

k^l 

^c,{x\X^\x) 
> 0. 

Since ci 0, we see or —X^ is non-negative depending on the sign of ci. Without loss of generahty, we can always 

assume Xf to be non- negative, because the negative sign can be absorbed by Z^. Further we see the set {Z'l,Zl} 
still forms a linearly independent set. 

Now all the Z°-{i < 2) and Zi remain unchanged, and replace with X^, Zj{j > 2) with Zj, we can find a 

|y) S such that (yjZjIy) 7^ 0, continue the above process, we would have got X2 which is non-negative. Finally 
we can replace all the s with s and thus the proof is completed. 
Next we prove Theorem 1 Theorem 3. 

Proof: ( "if" part) Since p'^^ is a classical-quantum state, it can be rewritten as 

i 

where is a linearly independent set, we can further assume it to be an orthonormal base, otherwise we may need 
to append some zero pi. For any state a G S{H'^), construct a quantum map f : S{H'^) S{H'^^) S{H'^^) such 
that 

£%a)=J2E^aEj (39) 

i 

where Ei — Perform £ on party a, then we have locally broadcast and of course the correlation in p"-^ is 

locally broadcast by party a as well. 

("only if" part) Suppose the correlation in p'^^ is locally broadcast by party a through the operator : S{H°-) — > 
S{H''^ (g) iJ''^), then 

where is the identity operator on H^. We have 

/(p"^'') = /(p"^'') ^ lip"''). 

Denote the operator T^^"''^ ■ S{H"'^ (g) H°-^) — > S{H°-^) as the partial tracing operator by tracing out 02, thus 
According to the condition 

and notice that lip""^) = S{p°'^\p°' ® p^), where S is the relative entropy, p'^ and p^ stand for reduced states, we have 

s{TaT'£"(^^\p"'WaT"^"^^'ip" ® p')) = •^Ip"'!/?" ® p')- (40) 

Now we shall introduce a theorem stating that (|Lindbladl . [TqTSI ) 

S{p\a) > S{£{p)\£{a)) (41) 
for any quantum state p and a, and any quantum map £ : S{H) S{K). 
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The equality holds if and only if there exists an operator T : S{K) S{H) such that 

J-£{p) — p, J-E{a) = a. 
An cxphcit form of is, see ( Havden et al\ . |20Q4| ). 



J-(r) = ai/2^t((£:(^))-i/2^(£:(^))-i/2)^i/2^ ^ g (42) 
Apply (PT|) to (PH)) . we know there exists an operator F""^^ such that 

Consider the explicit form of 7^"^'' from (j42|) and the product structure of p*^ p^, we can express J^"^^^ as J^**^ (8)!'', 
hence 

Use Lemma 1, we obtain 

i 

where is non-negative, {X^} constitutes a linearly independent set, thus 

z i 

since {-^^^} is a linearly independent set, we have 

So {A^f } is broadcastable, due to Theorem 1, Af s commute with each other, and hence can be diagonalized by the 
same basis {!*)}, now we obtain 

p^''=Y,^^\^){A<^Y,'', 

i 

it can be easily proved that Y^f' is non-negative, and hence p"^ is indeed a classical-quantum state. 
Now we prove Theorem 3 =^ Theorem 2. 

Proof: We shall prove only the non-trivial part. Suppose the correlation in p"'' can be locally broadcast by two 
operators respectively performed on party a and b: 

then we obtain 

So we have decomposed the operation f (E) £^ into two steps, each of which only deals with a single party. Through 
step one, we obtain 

Sip'^'lip^ ® p")) > S{r{p^')\£^{p^ ® p")), 
that is, lip"'') > lip"-^"^''), since I{p°'^°"'^) > liTia^p"'"^'') = lip"^''), we have 

/(p"'^) < lip"^"-^^) < lip''''). 
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Similarly, through step two, we obtain 

< lipp"'"'"') < lip"'''). 

With the condition I{p°-^^'^) = I{p°'^), we have I{p'^^^) — I{p"'^), which shows that the correlation in p'^^ is broadcast 
by party a, from Theorem 3, we know p"'^ is a classical-quantmii state. Exchange a and b in the above discussion, it's 
obvious that p'^^ is also a quantum-classical state. So p'^^ is a classical state. 
Next we prove Theorem 2 Theorem 1 

Proof: Again we shall only prove the non-trivial part. Suppose there exists a quantum operation £^ which can 
broadcast a set of states {p^}. We can find a orthonormal set and construct a composite system 

i 

where {p,} is a probability distribution. The party a can be easily broadcast by the operator form ([M)) . together 
with p"'^ can be locally broadcast, so is the correlation. Thus from Theorem 2, p"^ is a classical state, then p^ 
commutes with each other. 

From the above discussions, we have created a chain of equivalence among the three theorems: Theorem 1 
Theorem 2 Theorem 3. This has provided us with a unified picture of the no-broadcasting theorem in quantum 
systems from the information theoretical point of view. 



E. No-cloning and no-signaling 

According to Einstein's relativity theory, superluminal signaling cannot be physically realized. Yet due to the 
non-local property of quantum entanglement, superluminal signaling is po ssible provided perfect cloning machine can 
be made. The scheme has been well-known since Herbert (|Herbertl . Il982l ) first proposed his "FLASH" in 1982. The 



idea is as follows: suppose Alice and Bob, at an arbitrary distance, share a pair of entangled qubits in the state 
= (l/"v/2)(|01) — |10)). Alice can measure her qubit by either ax or az- If the measurement is CTz, Alice's qubit 
will collapse to the state |0) or |1), with probability 50%. Respectively, this prepares Bob's qubit in the state |1) or 
|0). Without knowing the result of Alice's measurement, the density matrix of Bob's qubit is ^|0)(0| + 5|1)(1| = 5/. 
On the other hand, if Alice's measurement is ax, Alice's qubit will collapse to the state \(px+) or \ipx-), where 
\(px+) — l/\/2(|0) -I- |1)), \ipx-) = l/-\/2(|0) — |1)), being eigenvectors of ax- Thus Bob's qubit is prepared in the state 
\(px~-) or \(px+) respectively, in this case the density matrix of Bob's qubit is still ^\lPx+){'Px+\ + ^\fx-){Vx-\ — \l- 
Obviously, Bob gets no information about which measurement is made by Alice. While, if perfect cloning is allowed, 
the scenario will change. Bob can use the cloning machine to make arbitrarily many copies of his qubit, in which 
way he is able to determine the exact state of his qubit, that is, whether an eigenstate of a^ or ax- With this 
information. Bob knows the measurement Alice has taken. Fortunately, since no-cloning theorem has been proved, 
the above superluminal signaling scheme cannot be realized, which leaves theory of relativity and quantum mechanics 
in coexistence. 

Up to now, there are many cloning schemes found, naturally one may ask, whether it is possible by using imperfect 
cloning, to extract information about which measuring basis Alice has used. According to the property of quantum 
transformation, the answer is no. To see this, we may first consider a simple scheme, that is , Bob can use the universal 
quantum cloning machine (UQCM) proposed by Buzek and Hillervl Buzek and Hillervl . ll996i ) to process his qubit. The 
UQCM transformation reads, 

|o)iQ)^y||oo)it) + y^i+)i;), 

|i)IQ)^/f|ii>U> + /^l+>lt), 

where \Q) is the original state of the copying-machine, j-f) and |— ) are two orthogonal states of the output, |+) = 
-^(|01) -I- |10)), |— ) = "Tf^l^''^^ ~ ^^"^ I t): I \) S'l'e the ancillary states which are orthogonal to each other. If 

Alice chooses a^, the density matrix of Bob's qubit after the process is 

Pfc = ^(|oo)(oo| + \\+){+\) + + 

= i(|00)(00| + |ll)(ll| + |+)(+|). 
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If Alice chooses Ox , it can be easily verified that th e density matrix wi ll not change, thus no information can be gained 
by Bob. In fact, Bruss et al. have pointed out in ( Brul3 et aZ.l . l200dbl ) that the density matrix of Bob's qubit will not 
change no matter what operation is taken on it, as long as the operation is linear and trace-preserving. Suppose the 
original density matrix shared between Alice and Bob is p"'', and Alice has done a measurement Am on her qubit, 
Bob makes a transformation B on his, then the shared density matrix becomes Am ^ B{p°'^), here m specifies which 
measurement Alice has taken. In Bob's view, with the linear and trace-preserving property oi Am^ the density matrix 
of his qubit is 



tra{Am®B{p'''')) 



BtraiAmmP"')) 



Note that tr and Tr both denote trace similarly in this review. Here we see that the density matrix of Bob's qubit 
has nothing to do with Alice's measurement Am^ therefore no information is transferred to Bob. Note that to get the 
above conclusion, we have only used the linear and trace-preserving property of Am- Since any quantum operator 
is linear and completely positive, no-signaling should always hold, thus providing a method to determine the fidelity 
limit of a cloning machine. 

Gisin studied the case of 1 — ?► 2 qubit UQCM in ( Gisinl . [l998l ) . We continue the scheme that Alice and Bob share a 
pair of entangled states. Now Alice has done some measurement by ax or cr^, and thus Bob's state has been prepared 
in a respect mixed state. Let there be a UQCM, suppose the input density matrix is — \ {I + m ■ a), with m 

being the Bloch vector of \(p), then after cloning the reduced state on party a and b should read, p"" ^ = (l + ?/m-cr). 



yielding the fidelity to be F = (1 
cloning machine should be 



77)72. According to the form of p° and p , the composite output state of the 



'^{h + 'n[m- (T ® I + I ®m- a) + ^ 



)Crj). 



The universality of UQCM requires 



The no-signaling condition requires 



PoutiJJm) =^U ®Upout{m)U'^ ® U^. 



2^' 



out 



2P 



2' 



(43) 



(44) 



where p°'^*{+z) represents the output state of the UQCM under the condition that Alice has take the measurement 
Gx and got result -|-. 

Also we should notice that must be positive. Putting the positive condition together with (|43l) and (|44| . we 



shah get ?7 < |(i^ < |). Although we have found an upper bound of F, the question remains whether it can be 



reached. But wc know it can be, since a practical UQCM scheme with F ~ ^ has been proposed! Buzek and Hillervl . 
11996). 

Navez et al. have derived t he upper bound of fidelity for d-dimensional 1 — >■ 2 UQCM using no-signaling 
condition! Navez and Cerj . |2003[) . and the bound also has been proved to be tight. Simon et al. have shown how 
no-signalin g condition togethe r with the static property of quantum mechanics can lead to properties of quantum 
dynamics ( Simon et al\ . [2OOII) . By static properties we mean: 1) The states of quantum systems are described as 
vectors in Hilbert space. 2) The usual observables are represented by projections in Hilbert space and the probabilities 
for measurement are described by the usual trace rule. The two properties with no-signaling condition shall imply 
that any quantum map must be completely positive and linear, which is what we already have in mind. This may help 
to understand why bound derived by no-signa hng condition is a l ways tight. The experimental test of the no-signaling 
theorem is also performed in optical system ( De Angelis et al\ . |2007[ ). From no-signaling condition, the monogamy 
relation of viola tion of Bell inequalities can be derived, and this can be used to obtain the optimal fidelity for asym- 
me tric cloning ([Pawlowski and Brukneii l2009l) . And some general properties of no-signaling theorem are presented 
in (iMasanes et al. . 20061 ). The relationship between optimal cloning and no signaling is pres ented in ( Ghosh et 



1999D . The no-signaling is shown to be related with optimal state estimation (jHan et aLl.l2010[). Also th e no-signaling 



is equivalent to the optimal condi tion in minimum - error quantum state discri mination ( Bae et aT] , l201ll ). more results 
of those topics can be found in ( Bae and Hwand . l2012f) for qubit case and (Bae, '2012 b|) for the general case. The 
optimal cloning of arbitrary fidelity by using no-signaling is studied in (Gedik and CakmaS . |2012| ). 
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F. No-cloning for unitary operators 

No-cloning is a fundamental theorem in quantum information science and quantum mechanics. It may be manifested 
in various versions. Simply by calculation, and with the help of definition of CNOT gate, we may find the following 
relations, 



CNOT{a^(E) I)CNOT = a^(gia.^, 

CNOT{a,(^ I)CNOT = cr^ ® /, 

CNOT{I ®a^)CNOT = I ® a^, 

CNOT{I ®a:,)CNOT = g^®u^. 



(45) 



It implies that the bit fiip operation is copied forwards (from first qubit to second qubit), while the phase flip 
operation is copied backwards. But we cannot copy simultaneously the bit flip operation and phase fiip operation. 
Those properties a re important for methods of quantum error correction and fault-tolerant quantum computation 
( Gottesmanl . Il998l) . This is a kind of no-cloning theorem for unitary operators. The quantum cloning of unitary 
operators is investigated in ( Chiribella et a^.l . |2008[ ). 



G. Other developments and related topics 



One important application of quantum information science is the quantum key distribution for quantum cryp- 
tography, which can provide the unconditional security for secrete key sharing. The security of the quantum key 
distribution is based on no-cloning theorem since if we can copy perfectly the transferred state, we can always find 
its exact form by copying it to infinite copies so that its exact form can be foun d. Fo r quantum cryptography pro- 



(iBell 



tocol E91 (lEkerti 11991,) . the security is based on the violation of Bell inequality 
no-broadcasting theorem unifies those theo rems together. Th is is al so shown in (|Acm et al. 
theorem for entangled states is shown in ( Koashi and Imotol Il998l ) 



1964). The unified picture of 
l2004al ). The no-cloning 
Related wit h entanglement cloning, it is also 



shown that orthogonal states in co mposite system s cannot be cloned ( Moil . [l998[l . related results are also available 
in ([Goldenberg and Vaidmanl . 119961 : iPeresl . [l996al ) . On the other hand, as a r everse process of qua i itum c loning, it is 
also pointed out that it is impossible to delete an unknown quantum s tate (iPati an d Brau nsteinl 2000l ). Quantum 
no-broadcasting can also be related with bounds on quantum capacity ( Janzing and SteudclT 2007 ) . D i fferen t from 
quantum case, classical broadcasting is possible with arbitrary high reso lution (Walker and Braunstei n. 2007). The 



difference between quantum copying and cl assical copying is studied in ( Shen et al\ . 12011 ). see also (jFenvea . ,20121) 



The classical no-cloning is also discuss ed (iDaffertshofer et al. . 2003). The linear assignment maps for correlated 



system-environment states is studied in (*Rodrig uez-Rosario et al. . 2010l ). the connection between the violation of the 
positivity of this linear assignments and the no-broadcasting theorem is found. By studying quantum correlation dif- 
ferent from quantum entanglement, the equivalence between locally bro adcastable and bro adcastable is investigated in 
(IWu and Gud . l201lD . see a review about quant umness of c orrelations (jModi et all |2012() . The no-signaling principle 
and the state distinguishability is studied i n ( Bad . l2012al) . The transformations which preserve commutativity of 
quantuni state s are studied in ( Nagvl . |2009[ ). The quantum channels related with quantum cloning are studied in 
( Bradleii 1201 ll) . It is also pointed out that no-cloning of non -orthogonal states does not necessarily mean that inner 
product of quantum states should preserve (iLi et all l2005bl) . No-cloning theorem means that two copies cannot be 
obtained out of a single copy, and if we study the information cont ent measured by Holev o quantity of one copy 



and two copies, a condition of states broadcasting can be obtained ( Horodecki et al. . 20061). It is also shown tha t 



no-cloning theorem is, in principle, equivalent with no-increasing of entanglement ( Horodecki and HorodeckH Il998() . 
The impossibility of reversing or complementing an unknown quantum state is a generalization of no-cloning theorem 

2005al) . The no-cloning studied by wave-packet collapse of quantum measurement is presented by Luo in 

2010a|) . 



No-cloning theorem is also illust rated in ( piek4ll982l : IWootters and Z urek'. '20091; lYuenUl986V it is also related with 
the no-imprinting theorem (Bennett et all 19921) . see related results in (Koashi and Imoto, 2002). The geometrical 
interpretation of no-cloning theorem is proposed as quantum no-stretching (jP'Ariano and Perinottil. l2009f) . It i s 
shown that quantum information cannot be split into complementary parts, this is no-splitting ( Zhou et all 20061) . 
The combination of no-cloning, no-broadcasting and monogamy of entan glement can be found in ( Leifeil , 2006 ) . The 
application of quantum cloning in quantum computation is discussed in ( Galvao and Hardvl . l2000l ). 
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III. UNIVERSAL QUANTUM CLONING MACHINES 

As we have shown in last section, there are various no-cloning theorems implied by the law of quantum mechanics. 
They imply that one cannot clone an arbitrary qubit perfectly. On the other hand, the approximate quantum cloning 
is not prohibited. So it is possible that one can get several copies that approximate the original state, with fidelity 
-F < 1. Hence one naturally raises a question: can we achieve the same fidelity for any state on the Bloch sphere, for 
the qubit case, or more generally, for any state in a d-dimensional Hilbert space? And what is the best fidelity we 
can get? 

A cloning machine that achieves equal fidelity for every state is called a universal quantum cloning machine (UQCM). 
This problem is equivalent to distribute information to different receivers, and it is natural to require the performance 
is the same for every input state, since we do not have any specific information about the input state ahead. According 
to no-cloning theorem, it is expected that the original input state will be destroyed and become as one of the output 
copies. For the simplest case, one qubit is cloned to have two copies, those two copies can be identical to each other, 
i.e., they are symmetric and of course they are different from the original input state. On the other hand, those two 
copies can also be different, both of them are similar to the the original input state but with different similarities, we 
mean that they are asymmetric. In this sense, there are symmetric and asymmetric UQCMs. 



A. Symmetric UQCM for qubit 



Consider a quantum cloning from 1 qubit to 2 qubits, a trivial scheme can be simply constructed as following: 

(1) , Measure the input state \a) in a random base \b). Here the vectors are on the Bloch sphere S^. The probability 
of obtaining result | ± 6) is p± ~ (^l±a -bj /2. 

(2) , Then duplicate the state | ± b) according to the measurement result. The fidelity is = \{a\ + 6)p and 
F_ = I (a I — respectively. 

In an average sense, the fidelity is 

Ftr^v^al = j P+F+ + = ^ + ^ (« ' ^) ^ ^fo = | (46) 

The problem is: can we design a better cloning machine? Buzek and Hillery ( Buzek and Hillervl . Il996l) proposed 
an optimal UQCM, namely, a unitary transformation on a larger Hilbert space: 



U\0}i\0)2\0)r = y^|0)i|0)2|0)fl + yi(|0)i|l)2 + |l)i|0)2)|l)i?, (47) 

U\l)i\Oh\0)n = y||l)i|l)2|l)i^ + y^(|0)i|l)2 + |l)i|0)2)|0)«. (48) 

On the l.h.s of the equations, the first qubit 1 is the input state, the second is a blank state and the third with subindex 
R is the ancillary state of the quantum cloning machine itself. By a unitary transformation which is demanded by 
quantum mechanics, we find the output state on the r.h.s. of the equations. We may find that the original qubit is 
destroyed and becomes as one of the output qubit in 1 while the blank state is now changed as another copy in party 
2, the ancillary state R may or may not be changed which will be traced out for the output. It is obvious that two 
output states are identical, so it is a symmetric quantum cloning machine. 

For an arbitrary normalized pure input state = a|0) -f- 6|1), since quantum mechanics is linear, by applying U 
on the state which is realized simply by following the above cloning transformation, we can find the copies. After 
tracing out the ancillary state, the output density matrix take the form: 

Pout = ® + ^(1^)1^^) + |V'^)|V))((V'I(V^^I + (^^KV-D- (49) 

Here 1-0^) = b*\0) — a*\l) is orthogonal to \tp). We can further trace out one of the two states to get the single copy 
density matrix 

Pi=P2 = ^|V^)(V'| + ^/. (50) 

Note this density matrix is of the form ri\'tp){il)\ + ^^^I with 77 called the "shrinking factor". This form is a linear 
combination of the original density matrix IV') (V"! a-nd the identity / which corresponds to completely mixed state and 
it is like a white noise. 
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In fact, in the original papers, the efficiency of the cloning machine is described by Hilbert-Schmidt norm d'^^g = 
Tr[{pin — Pout)HPin — Pout)], which also quan tifies the dis t ance o f two quantum states. The fidelity is a general accepted 
measure of merit of the quantum cloning ( Kwek et all l2000[ ). We will generally use fidelity as the measure of the 
quality of the copies in this review. 

We can obtain the single copy fidelity 



and the two copies fidelity (global fidelity). 



Fi = (tMpiIV-) = ^, (51) 



F2 (V^lpilV')^' = I (52) 



The single copy fidelity provides measure of similarity between state pi and the original input state. If it is one, those 
two states are completely the same, while if it is zero, those two states are orthogonal. One point may be noticed is 
that, the fidelity between a completely mixed state with \tfj) is 1/2. We know that a completely mixed state contains 
nothing about the input state, so fidelity 1/2 should be the farthest distance between two quantum states. Similarly, 
the global fidelity quantifies the similarity between the two-qubit output state with the ideal cloning case. If it is one, 
we have two perfect copies. We remark that the single copy fidelity does not depend on input state, so the quality of 
the copies has the state-independent characteristic. In this sense, the corresponding cloning machine is "universal" . 
One may find that the above presented cloning machine achieves highe r fidelity than the trivial one, and it is proved 
to be optimal (iBrufi et a/.l ll998aHGisinl ll998l:iGisin and Mass"mlll997t )). 



Gisin and Massar ( Gisiii and Massaif 1 1 99 7j ) then generalize the cloning machine to TV — M case, that is M copies 



are created from N identical qubits. Their cloning machine is a transformation: 



\Ni;)\R)^ ^ a,|(M-j)V',jV.^)|i?,) (53) 



where 



N+]_ {M-N)\{M-j)\ 
"^■ = V^17TTV (A/-iV-,)!M! ^^^^ 

a3\d\{M — j)ip , jil)-^) denote the normalized symmetric state with M — j states |'0) and j states IV'^)- Then the single 
copy fidelity is 

^^M(A^+1) + 7V 



In ( Gisin and Massailll997[ ) the op timality of this clon ing machine is proved for cases N = 1,2,. ..,7. The complete 



proof of the optimality is finished in ( Brufi et a/.l . Il998bl ) where the connection between optimal quantum cloning and 



optimal state estimation is established. The upper bound of N to M UQCM is found to be exactly equal to ([55 
hence Gisin and Massar UQCM is optimal. 



B. Symmetric UQCM for qudit 

For further generalizatio n, we may seek cloning ma chine for d-level sys tems. Buzek and Hillery proposed a 1 to 2 
d-dimensional UQCM (Bu zek and Hillervl . [l999)( Buze k and Hillervl .[ I99I): for a basis state |«), the transformation is 

iz)io)|i?) ^ ? m m.) ^^^—Y^mi) + \3)mR,)- m 

V 2(a +1) V ^(." + 1) i^j 

Here \Ri) is a set of orthogonal normalized ancillary state. The resultant one copy fidelity i s, F — {d + 3)/(2(j + 2). 

Later, a general N to M UQCM is constructed in a concise way by Werner ( Werneij . ll998l ). see also (IZanardi[l998h 
for related results. For N identical pure input state \'ip)^ the output density matrix is: 

Pout = I^.M ((|^)(V|)^^ SM (57) 
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where d[N] = ('^'^^ (we also use notation d[N] = C'^^_j^), and sm is a symmetrization operator that maps state 
in Ji'^'^ to symmetric state in the symmetric Hilbert space "Hf As an example, 

S2 = |00)(00| + |11>(11| + i(|01> + |10))((01| + (10|). (58) 



If we insert this expression into formula ([57|) . we can get exactly the expression of output density matrix (j49|) . So this 
UQCM can recover the TV = 1, M = 2, d = 2 one. 

For N to M case, the single copy fidelity is shown to be 



Fi = I^Tr [{mi^Pl^l'^^''''^) SM ((|V.)(^|)«^ ® /«(^^-^)) SM 
N(M + d)+M-N 



M{N + d) 



(59) 



In ( Werneij . Il998() . this single copy fidelity is proved to be optimal under the restriction that the operation is a 
mapping into the symmetric Hilbert space. Generally, there might exist a cloning machine performing better without 
this constraint. Keyl and Werner s t udied the more general case and proved this cloning machine is indeed the unique 
optimal UQCM ( Kevl and Werneil Il999[ ). As a special case, if we let = 1, M = 2, the fidelity apparently reduces 
to the Buzek and Hillery 1 to 2 d-dimensional UQCM: F = (d + 3)/(2(i + 2). And if we take the M -> cx) limit, the 
fidelity turns out to be F = {N + 1)/{N + d), this agrees with the state estimation result by Massar and Popescu 
( Massar and Popesculll995l ). 
We are also interested in the M copies fidelity (global fidelity), it can be found as follows ( Werneil . Il998f ). 



d[N] 



m{i:\f''sM ((|^)(^|)^^ ^/«(*^-^)) SM 



_ d[N] _ M!(A^ + rf- 1)! 
~ d[M] ~ N\{M + d-l)V 

Recently, Wang et at. ( Wang et al\ . l2011b| ) proposed a more general definition "L copies fidehty": Fl 
^IPoMtjilV')'*^ where Pout,L is the L copies output reduced density matrix. The expression is calculated as, 



(60) 



^ {d + N-l)\{M-N)\{M-L)\ (Af-mi+d-2)!(mi!)^ 
^ {d + M~l)\M\N\ ^ ^ (77ii-L)!(mi-iV)!(d-2)!(M-mi)!' ^ ' 

For L ~ 1 and L — M, the expression will reduce to results presented above (|59|60p . For another special case A^ = 1, 
expression of fidelity can be simplified by finding the explicit result of the summation, it reads, 

Fan et al. ( Fan et aZl . l2001al) proposed another version of UQCM, written in more explicit form: let n = (ni , . . . , n^) 
denote a d-component vector. And |n) = \ni, . . . , n^} is a completely symmetric and normalized state with Ui states 
in \i). These states is an orthogonal normalized basis of the symmetric Hilbert space H^^^ . Then for an arbitrary 
input state — J2i=i^i\'^)^ ^he A^-fold direct product lip)^^ could be expanded as: 



N 



\^)'''' = T.\/^^j^-T----7H. (63) 



The cloning transformation takes the form, 

\n)\R)^ J2 «r^,■|n + j)|i?,•) (64) 



M-N 



3 
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The notation means summation over all possible vectors n with ni 
orthogonal normalized ancillary states, as usual. The coefficients 



nd 



N and the \Rj) is a set of 



' (M - Ny.{N + d - 1)\ 
(M + rf - 1)! 



TT (»fc + jfc)! 



(65) 



This UQCM can achieve t he same fidelities as the UQCM given by Werner ( Werneil . ll998t ). It is optimal. Later Wang 
et al. ( Wang et aLl . l201l"bl ) proved that these two cloning machines are indeed equivalent by showing the output states 
are the same. First, divide the symmetric state |m) of M qudits into two parts with N qudits and M — N qudits, 
respectively. 



1 



M-N 



k 



En 



\'m — k)\k). 



The symmetry operator sm can be reformulated. After calculation, output density matrix in (|57p is shown to be: 



(66) 



iv!(Af-iv)!(A. + .-i)! f A^^- .r-^-x-K-^.)^;;;!^ 

= iM + d-l)l E I X E 11 (™, -fc,)!(m'-fc,)!fc,! I ' ^^^^ 

For the cloning machine (|64p. we can get the output density matrix after tracing out the ancillary state: 



iV!(M-iV)!(Ar + d-l)! 2^"^^,. [^^,'^, ' + . 

n,n ^ \ 

These two express i ons are apparently equivalent. 

In ( Wang et aLl . l2011bl) . a unified form of the symmetric UQCM is presented, up to an unimportant overall nor- 
malization factor, the transformation is. 

This cloning machine is realized by superposition of states in which some of the input states are permutated into one 
part of the maximally entangled states. Since sm = sm{I'^^ (X" sm^n), and the mapping of sm-n on the M ~ N 
maximally entangled states is: {sm-n ^ j^^-^y^+'j^i^-^) ^ the cloning transformation may be rewritten as: 

M-N 



M-N 

E 



In fact this coincides with the UQCM ((64)) . Here the complicated coefficients ((65)) proposed for optimal cloning 
machine can be naturally obtained. Also it can be simply seen that the transformation ()69p is equivalent to the 
construction ((57)) if the ancillary states are traced out. So the UQCM can be simply constructed, we can symmetrize 
the N input pure states and halves of some maximally entangled states, while other halves of the maximally entangled 
states are ancillary states. This simplify dramatically the construction of the UQCM theoretically and its physical 
implementation becomes easier. If maximally entangled states are available, the UQCM is to symmetrize the input 
pure states with one sides of the maximally entangled states. Indeed, some experiments follow this scheme. 
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C. Asymmetric quantum cloning 

In the previous subsections we are considering symmetric cloning machines which provide identical output copies. 
However, naturally we may try to distribute i nformation un equally among the copies. The 1 to 2 optimal asymmetric 
qubit c loner is found by Niu and Griffiths (|Cerj . l2000b[ ). Cerf ^Niu and Griffiths. Il998( l and Buzek, HiUery and 



Bednikl Buzek et all Il998l) . Their formalisms are slightly different, but they lead to a same relation between A's 



fidelity Fa and B's fidelity Fg: 

^{1-FaKI-Fb) >Fa + Fb~^ (71) 

So a tradeoff relation exists for the two fidelities, if one fidelity is large, correspondingly another fidelity will become 
small. This will be presented further in the following. 

The transformation can be written in the following form according to Buzek et a/. ljBuzek et al I I1998D : 

WA{a\<i>+)BR + b\0)B{\0)R + \1)r)/V2) ^ a|V')A|$+)Bi? + 6|V')B|*+)Afl (72) 

Here R is an ancillary state, |$+) = (|00) + |11))/V2 is a Bell basis. And the normalization condition of input 
state requires + ab + ~ 1, which is an ellipse equation. The reduced density matrix of A and B are: pA b — 

Fa,bH}{^Ij\ + (1 - FA,i3)|^^)(^^|, here 

Fa = 1- &V2, Fb^I- aV2, (73) 

which is just the fidelity of A and B, respectively. It is easy to check d73| satisfy the inequality (TfTt . And as special 
cases, we can see if a=0, then Fa = 1, Fb = 1/2, hence the information all goes to A, and for B it's all the same. If 
= &^ = 1/3, then it reduces to symmetric UQCM case, with fidelity Fa — Fb — 5/6. 

For completeness, here we would li ke to present a slightly different form for the asymmetric quantum cloning which 
is named by Cerf as a Pauli channel! Cerfl l2000bl) . We start from qubit case. An arbitrary quantum pure state takes 
the form, 

|V)=xo|0)+a;i|l), J2\x,\'^l. (74) 
i 

A maximally entangled state is written as 

|vl/+> = i=(|00) + |ll)). (75) 
We can write the complete quantum state of three particles as 

Wa\^+)bc - ^[|*+)ab|V')c 

+ {I®X)\^+)abX\^P)c 
+ {I^Z)\^+)abZ\^P)c 

+ {I(^XZ)\ySJ+)ABXZ\^)cl (76) 

where / is the identity, X, Z are two Pauli matrices and XZ is another Pauli matrix up to a whole factor i. 
Denote the unitary transformation C/„i.„ = A™Z", where m,n = 0, 1, and the relation ([75| can be rewritten as 

Wa\'^ + )bC - lj2^I(^U„,^^,,(g>U^^r.)\'f + )ABWc- (77) 
rn , n 

Here we remark that Z^^ = Z for 2-level system. We write it in this form since this relation can be generalized 
directly to the general d-dimension system. 

Now, suppose we do unitary transformation in the following form 



^ \ (t^a,/3«)C/a,-/3C/m,-«0C/m,«)|^'+)AB|V')c 

^ &„,„(/ (g) C/„^_„ ® Um,n)\'^'')AB\i>)c. (78) 
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where we defined 



bm.n^lY.'^-ir^-^'^a^,^. (79) 



2 

a.,l3 



The ampHtudes should be normahzaed ^ |Qa ,/3p = X^m « = 1- This is actually the asymmetric quantum 

cloning machine introduced by Cerf( Cerl . 2000b[ ). We can find the quantum states of A and C now take the form 



PA 



PC = Y.\^^r^,n\'U^,nW{mL,n- (81) 

m,n 

The quantum state of A is related with the quantum state C by relationship between Ua.p and 6m, n • 

The quantum state pA is the original quantum state after the quantum cloning. The quantum state pc is the copy. 
Now, let us see a special case, 

60,0 = 1, 60,1 = 61.0 = 61,1 = 0. (82) 

Crrespondingly, we can choose 

0-0,0 = 0.0,1 — fli.o = ^1,1 = 2" (83) 
So, we know the quantum states of A and C have the form 

PA^^I, Pc = m{i^l (84) 

As a quantum cloning machine, this means the original quantum state in A, ji/i), is completely destroyed. 
These results can be generalized to d-dimension system directly. 

The asymmetric cloning m achine was generalized to d-dimensional case by Braunstein, Buzek and 
Hillervl Braunstein et all l2001bl ). The setup is almost the same with |$"^) instead defined in higher-dimension, 
|$+) = -^J2j=i 3,nd hence the normalization relation is + 6^ + 2ab/d = 1. The output reduced density 
matrices are written in the form with shrinking factor: 

PA = {1- b'm{^|J\ + h'l,pB - (1 - a')|V')(^| + 0^1 (85) 



Hence the fidelities are: 



^ .nd— 1 od— 1 

,FB = l-a2_^. (86) 



If 0^ — 1)^ = d/{2d +2), it reduces to the symmetric 1 to 2 d-dim ensional UQCM case, with fidelity [d + 3)/(2(i + 2) 
A trade-off relation between Fa and Fb can be found as follows (iJiang and Yul . l2010al) : 



{^{d + l)FA-l + ^{d+l)FB-l? ^ {^{d + l)FA-l-^{d + l)FB-l? ^ , 

Optimality is satisfied when the inequality is saturated. They also give a similar inequality for 1 — > 1 -I- 1 -|- 1 case. 

Cer f obtained the same result in a different way, here we present the d-dimensional easel Cerl l20Q0at ICerf et all . 
l2002aD . This result can be reformulated for other cases such as for state-dependent case presented in next sections. 
The transformation is: 

Um,n\'^)A\Bm,-n)BR (88) 

rn,n—0 

Here Um,n is "generalized Pauli matrix" : 

C/m,„ = Xle^|fc + m)(/c| (89) 

k=0 
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and \Bm.n) is one of the generalized Bell basis: 



I Bm,n) 



Vd 



k=0 



The resultant reduced density matrix 



\k + m). 



(90) 



d-l 



(91) 



Hence the fidelity Fa = X]n=o ko,nP- For B, we replace am,n by its Fourier transform bm,n 
To clone all states equally well, the matrix a can be written in the following form: 



/ V X ■ 
X y ■ 

\x y ■ 



(92) 



• vJ 

In this form, Fa 



with normalization relation v'^ + 2{d— l)x^ + {d— l)^y^ = 1. In this form. Fa = v'^ + (d— l)x^ and the expression of 
bm,n is just to rcplacc xhy x' — [v + {d—2)x+{l — d)y]/d, yhyy' = {v — 2x + y)/d, v by v' — [v + 2{d—l)x+{d—l)'^y]/d. 
Optimal cloning requires y = 0, and if we let a = u — 6 = dx, these coincide with the parameters a and b in the 
first formalism. When v = v' = yj2/{d+ 1), x = x' = \/\/ (2d + 2), it reduces to the symmetric case. These results 
generalized the qutrit cloning presented by Durt and Gisin ( Cerf et oZI . l20Q2b[ ) . 

The opt imality of these cloni ng machines were also prove d by Iblisdir e t aLdlblisdir et al. l. l20Q5al) . Fiurasek, Filip 
and Cerf ( Fiurasek et al\ . l2005( )and Iblisdir, Acin and Gisin ( Iblisdir et cd\ . l2005b[ ). Thev also generalize the 1 to 2 
asymmetric cloning machine to more general cases. Here we use N — >■ Mi + • • • + to denote such a problem: 
construct an asymmetric cloning machine resulting fidelity Fi for Mi copies, F2 for M2 copies, . . . , Fj, for Mp copies. 

The 1—^1 + 1 + 1 d-dimensional cloning machine was constructed as following: 



2d + 2 

7|^)c(|$+)a/?J$ 



a|V')A(|$ + )Bfl|*+)cS + |3' + >B5|$+)cfl) + mB{\^+)AR\<^ + )cS + \^^) As\^^) C r) + 



IBS 



|$^ 



IAS 



|$^ 



IBR 



)] 



(93) 



where A,B,C are three output states and R, S are anciUary states. |$+) = ^/VdJ2k=o\^^) usual. For nor- 
malization purpose, a,/3,7 obey + + 7^^ + |(a/3 + + aj) = 1. The final one copy fidelities for A,B,C 
are: 



Fa 
Fb 
Fc = l- 



1 



d 

d-l 
d 

d-l 



/32+7' + 



+ 7^ + 



2/37 
d+1 

2a7 
d+l 

2a(3 
d+l 



(94) 



In (jlblisdir et all l2005al) . the 1 — 1 + n cloning machine was found. The Hilbert space jg decomposed 

into two symmetric subspace T-L^j^i ® Let Sn+i and s„_i denote the projection operator, respectively, the 

transformation can be written as: 



T:p^ ia*Sn+i + /3*5„-i)(p ® /^")(as„+i + /?s„-i). 



(95) 



It is a generalization of the construction of symmetric UQCM ((57)) . The resulting fidelity is Fa = 1 — for the '1' 

+ = 1. A more general case, N — > Ma + Mb, 



side, and Fb = ^ + -^{y"^ + ^/n(n + 2)xy). Her e x and y satisfy 
is studied with similar method in (llblisdir et a^.l ■ l2005b^ . 

I n studying asymmetri c quantum cloning, the region of possible outp ut fidelities for one to th ree cloning is studied 
in ( Jiang and Yu . 2010a), t he case of one to many case is studied in ( Gwiklinski et al\ . l2012f) . the general case is 
studied in (|Kav et all \20m . 
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D. A unified UQCM 



Recently, Wang et al. proposed a unified way to construct general asymmetric UQCM ( Wang et al\ . I2OIIIJ ). 



The essence is to replace the symmetric operator sm hi construction (|69p by a linear combination of identity / 
and many permutation operators. Take the 1 to 2 qubit cloning case as the simplest example, S2 — + "P), 

where V = |00)(00| + |11)(11| + |01)(10| + |10)(01| is a permutation(swap) operator (T'ljZ) = l^j)). If S2 is replaced 
by al®"^ + PV , the output density matrix exactly coincides with the output density matrix in construction (j72l) : 



IV')^ ^ a\'4,)A\'^+)BR + h\i^)B\<^+)AR: with a = ^a,P= ^b. 

In order to introduce this method, here we present two examples to show explicitly that it can be applied straight- 
forwardly for various occasions. 

For 1—^3 asymmetric qubit cloning case, we replace the symmetry operator S3 by 

al + l3Vi2 + jVis + SV23 + fJ-Vus + i^Vi32- (96) 

Note Vmn is the operator that swap the m qubit and the n qubit, and 7^123 is a cyclic operator that move the first 
qubit to the second place, the second qubit to the third place, and the third qubit to the first place. 7^132 is its inverse 
transformation. In fact these six components in (|96[) are just the elements of permutation group S3. The symmetry 
operator 53 = i(/ + 7^12 + "Pis + 7^23 + 7^123 + 7^132 ), is retrieved when a = l3 = j = S = fj. = L'=^. The 1 — >■ 3 
asymmetric qubit cloning can be obtained by replacing S3 by (|96|) and insert it to the cloning transformation (|69p . 
Here we would like to remark that the number of essential permutations for the specific 1 — > 3 case are actually three. 
There are only three independent parameters corresponding to cases: the input state is in first, second, and third 
positions, respectively. This will be shown explicitly later. Now, if we trace out the ancillary states, it is equivalent 
to modify (|57|) . The final density operator is: 

P = ^{al + PVl2 + 7^13 + ^7^23 + MPi23 + vVl32){\i^){i'\ ®I® I)[al + l3Vl2 + 7^13 + <57'23 + ^iVl23 + VV132) 

= ^[a\^){M Pimm + \i^)m) ® /s + 7(io^)(V'Oi + \i4>)m)i3 ® h 

+ (5|V')(V'li «) (|oo)(oo| + |ii)(ii| + |oi)(io| + |io)(oi|) + /u(|0V'0)(V'00| + |iV'0)(V'Oi| + \Oipi){ijio\ + 

+ i^(|00iA)(V'00| + |01V')(V'01| + \W^){^plO\ + \n^){i(jU\)]{aI + pVu + lVi3 + '57'23 + mPi23 + i'7'i32) 

= i[(a2 ^(J^^l^^^^l ^ j,^ (^2 _^^2)j^ ^ (^2^^2)j^ l^^^^l 

+ (a/3 + ix5){\iPQ){Q^\ + |V'1)(1V'I + |OV')(V'0| + |lV')(V'l|)i2 ® h 

+ (a7 + z.(5)(|V0)(0V'| + + \Q^)m\ + |lV')(V'l|)i3 ® h 

+ (/37 + Aii^)(|00V')(0V'0| + |01V')(1V'0| + |10V')(0V'1| + trans.) 

+ ((5^ + a^)(|0V'0)V'00| + |0?M)V'10| + |1V'0)(V'01| + {iIjI^ + trans.) 

+ (57(|0V'0)(00V'| + |0V'1)(10V'| + |lV'0)(01i/;| + |1^1|) (IItAI + irans.) 

+ {pv + -in)h ® (|^0)(0V'| + + \H)m\ + |iV')(V'i|)23 

+ ai/(|OOV')(V'00| + |01V')(V'01| + |10V')(i/'10| + |11V')V'11| + trans.) 
+ 2a5\'il^){il>l (|00)(00| + |01)(10| + |10)(01| + |11>(11|)23 

+ 2p^l\i^){'4J\2 ® {mm + |oi)(io| + |io)(oi| + |ii>(ii|)i3 

+ 27z/|V)(^|3 ® {mm + |01)(10| + |10)(01| + |ll)(ll|)i2 (97) 

Here trans, denotes the rotation of previous terms. Trace out the second and third qubits, we obtain the single qubit 
reduced density matrix, 

pi = [2{a^ + + a8) + a(2/3 + 27 + /i + j/) + 5{2p + 2j/ + /3 + 7) + ^1/ + 

+ Pn + fSiy + "ffi + ji^)I (98) 

Hence a normalization relation is easily obtained: 

2{a^ + 5^ + a5) + a(2/J + 27 + /i + i^) + (5(2/i + 2i/ + /J + 7) + /ii/ + l3j+ 

2(/32 + + + 1^^ + I3fi + + "fn + -/i^) = 1 (99) 
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Similarly we can find the reduced density matrices of the second and third copies, their fidelities are: 

i^i = 1 - + /i)' + + + (7 + aO' + (7 + ^f] 
F2 = 1 - i[(a + 5f + (a + vf + (7 + Sf + (7 + vf] 

F:, = \-]^[{a + 5f + {a + ^,f^{P + 5f + {P + ^,f] (100) 

It reduces to the symmetric cloning case when a = /3 = 7 = 5 = /i = i/=i, and the fidelity is 7/9, which exactly 
coincide with the UQCM fidelity formula ([5^ . To see its relation with the previous 1 — ?> 3 asymmetric UQCM (|93p . 
we can explicitly compute out the density matrix in ([93]): 

Pout = ^{4(a'|^00) +/3'|0V'0) +7'|00V'))(a'(V'00| +/3'(0V'0| +7'(00V'|) 

+ 2[a'(|V01) + V'lO)) + /S'dOV'l) + IIV-O)) + 7'(|01?A) + |10V'))] 
[a'((V'01| + (?M0|) + /3'((0V'1| + (IV'OI) + 7'((01V'I + (10?M)] 

+ 4(a'|i/^ll) + + 7'|llV'))(a'(V'll| + P' + 7'(ll^l)} (101) 

For clarity purpose we replace the coefficients q;,/3,7 in (|93p with a' ,[3' . Compare this expression with (|97)) . we 
found if the following equations are satisfied, they are equivalent: 

n-'2 -,'2 

^ = (a + 5)^^ = (/3 + M)^^ = (7 + -)^ 

= 12a(5, /^'^ = 12^/i, 7'^ = 127;^. (102) 

This implies a — 6 — a'/(2V3), /3 — — /3'/(2\/3),7 = = 7'/(2-\/3). And in this case the fidelity expressions (jlOOp 
exactly coincide with the previous results (|94l) . The cloning machine here has six parameters, which indicates that it 
is a general form of asymmetric UQCM, and we do not need to consider the specific input positions. 
We can study the 2 — 3 case similarly. The resultant density matrix is: 

P = \{al + PV12 + 7^13 + 5V23 + liVi27, + vVi^2){\i^ij){ipi^\ ® I){al + PV12 + 7^i3 + 5V27i + M^i23 + ^^^132) 

= \[{a + /3)IV'^) Wl ®h + {l + /i)(|Oi^V) W0| + IIVV') Wll) 

+ {5 + i.)(|i^OV')(V'V'0| + \ijl^){'4j^l\)]{al + pVi2 + 77^13 + 5V2:i + ^^123 + J^T'iaa) 

= i[(a + /3)2|v.V')(V'V'l ® /3 + (7 + <^ IV'V'X^V'I + ((5 + vf\i^){'^\ ®h® 

+ (a + /3)(7 + ^)(|G?/'-0)(V''0O| + |1V'V')(V''01| +tmns.) 
+ {a + I3){6 + v){\%1>Q'4>){%1;iIjQ\ + IV'IV') (V'V'll + irans.) 

+ (7 + /i)((5 + i^)(|i/;0?/;)(0V'V'| + IV'IV') (IV'V'I + irons.) (103) 

We can see that there are only three independent parameters in the final expression: a + /3, 7 + /x, 5 + so we 
denote them by A, B and C respectively. We trace out the other two states to obtain the following one copy reduced 
density matrices: 

Pi = [A^ + +AB + AC + BC)\^){il^\ + —I 
P2 = (A^ + B^+AB + AC + BCM{4,\ + 

P3 = {B^ +C^+AB + AC + BC)\i:){^P\ + —I (104) 

The coefficients apparently satisfy a normalization relation: + B'^ + C'^ + AB + BC + CA = 1. From the one 
copy reduced density matrices we simply read out the fidelities: 

tj2 (j2 a2 

F,^1-—,F2^1-—,F,^1~— (105) 

For symmetric cloning case, we let A = S = C = l/\/6, then the fidelity is 11/12, which exactly coincide with the 
UQCM fidelity formula dSH). 
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E. Singlet monogamy and optimal cloning 

In quantum information science, entanglement is a resource for various QIP applications. On the other hand, 
the entanglement cannot be shared freely among multi-parties. For example, for a multipartite quantum state, one 
party cannot be maximally entangled independently with other two parties simultaneously. It means that entan- 
glement is monogamous. There are some monogamy inequalitie s for entanglement sharing ( Coffman et all I2OOOI : 
lOsborne and Verstraetell2006l: lOu and Fanl . l2007t lOu a/.l . [2OO8I) . 

In this review, we consider the singlet monogamy in application of quantum cloning. We know that singlet is a 
natural maximally entangled state, we use the name of singlet monogamy to describe the restrictions on entanglement 
sharing. 

Quantitatively, the amount of entanglement between A and B can be defined as 

PA,B = max($+|C/ (g) Vpa,bU'< ® V^\^+) (106) 

where \^~^) = J2i=o \ii)/^/d is the d-dimensional maximally entangled state, which is standard in this review. This 
quantity describes, under local unitary operations, the fidelity between state pa,b and the maximally entangled 
state. In (jKav et al\ . |2009| ) , Kay, Kaszlikowski and Ramanathan discovered the relation b etween singlet m onogamy 
and 1 — T' iV optimal asymmetric UQCM. In their approach, a setup proposed by Fiurasekl FiuraseH 2001al) is used: 
Aouti'4'in) is a reduced density matrix so that the efficiency of this cloning machine F is m easured by averaging 
Tr[^ y/pi^Aoutiipin)y^Pi7i]'^- Note this is a "average" definition of fidelity. In ( Fiurased l2001al ) it is proved F < dX 
where A is the maximal eigenvalue of the matrix 



J d^Jzn[\^Jzn){^7n\ (SAoutii'in)]- (107) 

For the specific 1 — >• iV asymmetric cloning case, Ao„t(V'in) is defined to be 

N 

Aout{lpin) = ^aih (g) - ■■ (g) li^i g) |-0m)(V'™|i <^ g) - ■■ g)lN- (108) 



Here ai is a set of parameters to describe the required asymmetry of output states, which satisfies X]i!=i ~ 1- 
Rewriting \ipin) as U\0), where U is & unitary operator in d-dimensional Hilbert space, then from (|107p we find 

N 

R= dU'^a^U^ g)U\00){00\o,^U* g>U\ (109) 
1=1 

where the subscript denotes a state entangled with the N output states, which just comes from |V'm)('0in|^ in 
expression (|107p . After calculation it turns out to be 

1 ^ 

^ ' i—l 

To find out the eigenvalue of this matrix, an ansatz is proposed: 

N 

\^)=J2m^)ml...i^-lK^+l)...N. (111) 
i=l 

/3i is parameters satisfy normalization condition (X^t^i A)^ + {d — l)X]ili = d,, and |$) means a normalized 
superposition of all permutation of \<p+)»{N~i)/2 ^j. ^ |^+<)®(w-2)/2|o^) foj. 

even TV. It satisfies 

(l*+)(*+lo,j®/)|$)o,4|$)i...(^-i)(.+i)...w =7.jl*+)oj|$)i...o--i)0+i)...jv- (112) 

Here 7^.^ = [1 + 5ij{d — l)]/d and hence we know \'^) is a eigenvector of R if ai^X^jLi — + 1) ^ loi' 

every i. Combine this constraint with the expression of singlet monogamy of \'^): po i — (X^^Li 7jj/^j)^; as well as 
the normalization condition, we get the singlet monogamy relation for 1 — >■ iV asymmetric cloning machine: 

i=l i=l 
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It is straightforward to find the one copy fidelity Fi = (po,i<^ + !)■ For symmetric UQCM case, one let all 

j Pn.i to be equal t o {N + d — l)/dN and then the previous result F = {2N + d — l)/[N{d + 1)] is regenerated. In 
(iKav et all 120091 ) it is also shown that the previous 1 — > 1 + 1 + 1 asymmetric cloning and 1 — > 1 + iV asymmetric 
cloning cases are consistent with this approach. 

The 1 — >■ 4 asymmetric cloning can be similarly studied ( Ren et "aZI . 1201 The normalization condition in this 
specific case turns out to be: 

/?? + /3| + Pi +I31 + \{fiip2 + /3i/33 + PiPa + /32/33 + hPi + PsPa) = 1 (114) 
and the fidelity of these four copies are: 

= 1 - '^-^[Pi + Pi + Pi + 'rr: ' (115) 

F, = l-^[/3f+ Pl + + ^^"^"^ ' ' "^"^1 , (116) 



2(/32/33 


f /32/34 - 


f /33/34) 




d+1 




2(/3i/33 


f /3i/34 - 


F P3pi) 




d+1 




2(/3i/32 


f /3i/34 - 


t- /32/34) 




d+1 




2(/3i/32 


f /?l/?3 - 


f/32/33) 



F3 = 1 - ^[/?? + Pi + /3| + ^^"^"^ ' "^"^1 , (117) 

= 1 - ^[/?? + Pi + /3| + ^^"^"^ ';;7 ' "^"^1 . (118) 

With general asymmetric quantum cloning machine available, we can expect that the corresponding relationship 
between quantum cloning and entanglement monogamy can be constructed. 



F. Mixed-state quantum cloning 

In the previous discussions of quantum cloning, the input state is assumed to be pure. What if the input state is 
mixed state p? Sometim es since we only look at the resulted local one -copy reduced density matrix, this procedure 
i s named "broadcast ing" ( Barnum et al. . Il996l : iD'Ariano et all . l2005bl ). as we already presented in this review. In 



( Barnum et a/.l . ll996() . Barnum et al. proved the 1 — >■ 2 no cloning theorem can be extended to mixed state case, that 



is, for two non-commuting input density matrices, the cloning machine cannot copy both perfectly, as we have already 
shown in previous sections. The n D'Ariano, Macchiave llo and Perinotti studied the extended N ^ M case and 
constructed the optimal UQCM (jP'Ariano et a/.l . l2005bl ). They found a non-trivial result that the no-broadcasting 



theorem cannot be generalized to more than one input case. Specifically, for UQCM, it is even possible to purify the 
input states when iV > 4, this phenomenon is called "superbroadcasting" . Note here UQCM does not mean constant 
fidelity rea ched for every rnixed st ate, since the existence of such cloning machine (1 — M) was nullified by Chen 
and Chen (IChen and Chenl . l2007bD . For mixed state cloning, it seems reasonable to use the shrinking factor a s the 



meas ure of merit for the quantum cloning machine. This is for cloning of mixed states in symmetric subspace (|Fanl . 
l2003f ). The property of "universal" for mixed cloning machine is in the sense that the shrinking factor of the single 
output is independent of the input mixed state. 

In this subsection, we try to rev iew some explicit results of mixed state cloning studied in ( Dang and Fanl . l2007t 



iFan et aLl . [20071: lYang et a/J . l2007[ ). The UQCM for pure state (I57IM)) can be applied apparently to one input mixed 
state. But if we input the direct product of two identical p, direct application of (1571) cannot give the optimal output. 
This can be easily figured out if we consider the 2 — >■ 2 case. The optimal transformation is just leaving it unchanged, 
but if we apply the symmetrization projection, since p ® p contains an asymmetric part, this part is deleted so the 
final state changes. So we need to find out other ways to achieve maximal fidelity. 

We suppose the input state is identical copies of p = zo|0)(0| + zi|0)(l| + 22II) (0| + 2;3|1)(1|, and we use the notation 
|m,n) to denote the totally symmetric state with m |0)s and n |l)s. Additionally we introduce \nL/n) which is 
constructed by multiplying each components in |m, n) by a number of a; = exp[27rim!n!/(m + n)!]. For example, 
|2~1) ^ (|001) +a;|010) + |100))/V3. Obviously |m,n) is orthogonal to |?^). 
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Then the 2 — > 3 transformation is written as: 

|2,0)|i?) 
|l,l)|i?) 
|0,2)|i?) 

|l7l)|i?> ^ ^2'^'^^'^"^ + ^^|l,2)|i?i). (119) 

It can be verified that the output single copy reduced density matrix is |p+ j^- The shrinking factor 5/6, apparently 
coincide with the maximal shrinking factor of 2 — >■ 3 UQCM in pure state case. The more general 2 — >■ A/ mixed state 
doner is constructed in similar way: 

M-2 




\2,0)\R) ^ aok\M -k,k)\Rk) 

M-2 

|l,l)|i?)^ aik\M-k-l,k + l)\Rk) 

M-2 

|0,2)|i?)^ J2o^2k\M^k-2,k + 2)\Rk) 

k=0 
M-2 



where 



_ / 6(M-2)!(M-j-fc)!0- + fc)! 

Y (2-j)!(Af + l)!(M-2-fc)!jU!- ^ ' 

By calculations, it can also be shown that the shrinking factor leads to previous results ([5^ corresponding for pure 
state case, hence it's optiin al. 

In (jPang and Fanl . |2007[ ) this construction is generalized to — >■ M case: 



M-N 



\N-m,m)\R) ^ ^ (3^k\M — m — k,m + k)\RM-N-k,k), (122) 



fc=0 



the coefficients are: 



_ l iM-Ny.jN + iy. I [M-m-ky. l im + ky 
P"'''~\J {M + iy y iN-my{M~N-ky\ m\k\ ■ ^ ' 



G. Universal NOT gate 



Similar to the quantum cloning problem, one can ask if there is some transformation U that convert an arbitrary state 
1^) =a|0)+/?|l) to its conjugate state |V'-^) = /3*|0) -a*|l). For two states Itpi) =a|0)+/3|l) and |i/'2) =7|0)+(5|1), 
we have {ip2\i^i) = 7*a + S* /S — (^{ip2\U^U\ipi)'j , hence U is an anti-unitary operator. And it is not c ompletely 



positive hence cannot be applied to a small system, as argued by Buzek, Hillery and Werner in (jBuzek et al. 1999). 

Then it is a question whether we can have a universal NOT gate approximately. A general N — > M universal 
NOT gate is constructed by using the universal cloning machine. The final single copy output density matrix is 
Pout,i = ■/7^l''/'"'")('0"'"l + nT2-^^ regardless of M. In fact, this is exactly the reduced density matrix of the ancilla in 
the UQCM. This is an interesting resu lt since it shows the anc illa has the "anti-clone" meaning. The optimality of 
this universal NOT gate is also proved (jBuzek and Hillervl . I2OOOI) . The universal NOT gate or anti-cloning is the same 
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FIG. 2 The six states used in quantum key distribution, the optimal cloning machine to clone those six states is a UQCM. 



as the universal spin flip machine ( Gisin and Popescul . Il999l ). Related, it is found that a pair of antiparallel spins 
can contai n more information than that of parallel spins. The universal NOT gate is studied for continuous variable 
system in ( Cerf and Iblisdiil. 2001al) . The experimental implementation of universal NOT gate in optical system is 



reported in ( De Martini et aLl . l2002l ). 



H. Minimal input set, six-state cryptography and other results 

Bruss showed that the 1 — > 2 o ptimal cloning of the following six states with equal fidelity for each state is equivalent 
to the qubit UOCM (lBruiail998D . 



{|0),|l)}; 

{i=(|0) + |l)),i=(|0)-|l))}; 

{i=(|0)+z|l)),i=(|0)-z|l))}. (124) 

These six states can be represented on Bloch sphere as FIGH] 

These six states are exactly the three basis used in the six-state QKD protoc ol, and indeed the UQCM can be 



regar ded as the optimal way to attack the quantum channel in this protocol ( Bechmann-Pasauinucci and Gisinl . 
11999^. This is an interesting phenomenon, it means that the optimal cloning machine for those six states can actually 
clone arbitrary qubits optimally. On the other hand, it also means that we cannot clone six states better than a 
UQCM does. 

A reverse question might be interesting: how many states are enough to define a UQCM? More explicitly, what is 
the minimal number of the states in the input set, such that the opt imal cloning machine that achieves equal fidelity 



for them is equivalent to the UQCM? Jing et al. ( Jing et oZI . l2012i) solved this problem in the 1 — 2 cloning case. 



The minimal set turns out to be four states on the vertex of a tetrahedron: 

= |0), 

1^-2) = cos(0/2)|O) +sin(0/2)|l), 

IVa) = cos(0/2)|O)+sin(0/2)e2-/3|i)^ 

|V'4> = cos(6'/2)|0) +sin(6'/2)e'*"/='|l), (125) 

where 9 satisfies cos(6'/2) = see FICEj 

There is a similar phenomenon for states on the equator of the Bloch sphere, which will be demonstrated in the 
following section. 



I. Other developments and related topics 



Other works related with universal cloning include: Gisin and Huttner pointed ou t the relationships betwee n quan- 
tum cloning, eavesdropping of quantum key distributions and the Bell inequalities ( Gisin and Huttneil . Il997l ). Jiang 
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|0) 



FIG. 3 The four states on the vertex of a tetrahedron, which determines a UQCM in 1 — >■ 2 cloning case. 



and Yu constructed a Hamilto nian realization of UQCM, and the maximal eigenvalue o f this Hamiltonian matr ix is the 
fidelity (jjiang and Yul . l2010bl) . The spin networks is also possible to realize the UQCM (jPe Chiara et a/] . 12004 ). Pang, 
Wu and Chen proved the non-exist ence of a universal quantum machine to examine the precision of unknown quantum 
states, which is related to UQCM ( Pang et"aZI . l201ll ). Roubert and Braun studied the introduct ion of interference in 
UQCM and found that it does not affect the 5/6 optimal 1 to 2 qubit symmetric cloning result ( Roubert a nd Braunl. 
I2OO&) . If the ancillary state is not ideally initialed, its effect o n the optimal UQCM is s tudied in (jZhang et aL , .2012i) . 



The one to many universal cloning machine was studi ed in (lAlbeverio and Fei . 2000 ) . Mix ed state cloning is also 



related with cloning of states with temperature effects (Baghbanzadeh and Rezakhani', '2009^. The cl oning is related 
with optimizing the completely maps using semidefinite programmi ng (Audcnae rt and Dc M ooR [2002? ) . The measure- 
ments on various subsystems of the cloning mach ine is studied i n (iBruB et aLLl200ll). Asymptotically, the q uantum 
cloning machine corre sponds to state estimation (iBae and Acini . 12006 ; Brufi et al. , Il998bl: iDerka et all Il998fl . for d- 
dimensional case see ijBrufi and Macchiavellol 1 1999 ) . Also there exists a tradeoff relation bet ween the information 
gain and the disturbance on the estimated state ( BanaszeS . l200l[ ). also in ( Maccon^ . |2006| ) and ( Kretschmann et al\ . 
I2008D . this should be related with the asymmetric quantum cloning. The same type of trade-of f relations between 
measurement accuracy of two or three non-commuting observables of a qubit system is studied in ( Sagawa and Uedal . 
|2008^, this leads to the no-cloning inequality. The applicatio n of this method i n quantum communication and the sep- 
arability of quantu m and classic al information i s stud ied in ( Ricci et aLl . l200"5l ). The realization of UQCM is proposed 
in optical svst em (iFilid. 2p04allbl : llrvine et aZl . l2004) . The asymmetric UQCM is realized experimentally by partial 



teleportation (iZ hao et al\ . 20p5|). The asym metric quantum cloning machine is realized experimentally by polariza- 
tion states of single photons ( Cernoch et al\. i2009 l . The experimental quantum cloning can also be realized by using 
photons orbital angular momentum ( Nagali et aLl . l2009l ). If both polarization and orbital angular momentum degrees 
of freedom of photons are used, the four-dimensional quant um state can b e encoded. The experimental cloning of 
four-dimension state by this scheme is demonstrated in (Naga li et a/.l . [20T0I ) . The general UQCM re alized by projec 
five op erators and stochastic maps is investigated both theoretically and experimentally presented in (ISciarrino et at. 



The reverse of quantum cl oning is also stud ied in photon stimulated emission scheme (jRaeisi et all 120121 ) 



tive op e 

l2004bl) . , . , , 

and in continuous variable system ( Filip et aZI . l2004j ). By photon po larization in optics sys tem, the universal quan- 
tum cloning and universal NOT gate is implemented exper imentally ( Sciarrino et al., '2004a'). A recent review about 



photonic quantum information processing can be found in ( Martini and Sciarrino. , .2012; .Pan et aL . 20121). 



It i s shown that a pair of qubits with anti-parallel spins may en code more qua ntum information ( Gisin and Popescul . 
I1999D . collective and local measurements of them is studied in (lMassaii[2000l) . the cloning of those kind of states is 
studied in ( Fiurasek et al\ . \200'i) . The state estimation is corresponding to one to infinity quantum cloning, and it 
roughly describes how to find the exact form of an unknown state. The problem of learning an unkn own unitary 
trans formation from a finite number of examples is related, but different from cloning which is studied in ( Bisio et all 
I2OIOD . The cloning of a quantum measurement is studied in (iBisio et al\ . l201l[ ) . Two incompatible observables cannot 
be measur ed simultaneously for a quantum system, the cloning schemes are studied for this task to accomplish it 
optimally ( Brougham et aLl . l2006( ). As one application, the UQCM is adopted to investigate the enta nglement and the 
quan tum coherence of the output field in the high-gain quantum injected parametric amplification ( Caminati et all . 
'2006^. The superbroadcasting is also applied for a met hod that broadcasting and simultaneous purification of the 
local output states are performed ( Chiribella et aLl . 12007). The upper found o f global fidelity fo r mixed state universal 
cloning and state-dependent cloning are obtai ned in ( Rasteginl gOOSbl ) and in ( Rasteginl . l2003a[) . The optimal minimal 



measurements of mixed states is studied in JVidal aLl . Il999l) . The repeatable quantum channels with quantum 



memory is studied in (|Rvbar and Zima 1 12008D . this topic is closely related with quantum cloning. Several cases 
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of qubit quantum cloning combinations are also investigated in (IWu and Wul . l2012f ) . The high fidelity copies from 
asymmetri c cloning machine are studied in (jSiomau and Fritz schd . I2010a^ .~ The universal controlled-NOT gate is 
studied in ( Siomau and Fritzschd . [201 Obi ). Numeric al calculations are performed t o study the relationships between 
fidelities of cloning machines and the ent anglement (|Durt and Van de Puttd . [20TTI ). Related, the optimal realization 



of the transposition maps is studied in (iBuscerni et ai . 2003). In relativistic al quantum information, a trade-off 



relation is studied for universal cloning of qudit ( Jochym-O'Connor et all . 1201 ih . 

The possib ility to improve th e fidelity of the UQCM in the photon stimulated emission scheme is studied 
in (|Dasgupt a and Agarwal| 2001). The bro adband photon cloning and the entanglement creation of atoms in 
waveguide is studied in ([Valente all |2012| ). The application of cloning machine to improve the detectors is in 
(iDeuar and Munrol . '2000a') ._ The info rmati on transfer, and the inform ation in practical in cloning machine are pre- 
sented in (|Deuar a nd Mun^, l2000b[) and (IDeuar and Munrol. 
and in quantum cloning machi ne is studied in (|Di Franco et al 



2000c ). The information flux in many body system 



20071 ). The universal cloning by entangled paramet- 



ric amplificatio n is studied in jDe Martini et all \200^ . The proposals to implement cloning machines in separate 
cavities are i n (iFang et gP . 1201 ll ). bv superconducting quantum-interference device qubits in a cavi ty is presente d in 
(jYang et al ],|2008^. The scheme for implementing a UQCM in cavity QED with atoms is studied in (IZheng!. '2004'). by 
ion trap technique is proposed in ([Zhena . ,2005[). bv cav i ty-assi sted atomic collisions is proposed in ( Zou et al . 2003). 



via cavity-assisted interaction is stu died in (iFang et al 



. 2012al) . The scheme of quantum cloning of atomic state into 

two photonic states is presented in ( Song and Qinl . 2008 ). The comparison of fidelities of quantum cloning expressed 
in theory and under experimental conditi ons is i nvesti gated in (K han and Howell . .2004, ). The well-accepted theory of 
fidelity for mixed states can be found in ( Joszal [l994l ). 
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IV. PROBABILISTIC QUANTUM CLONING 

Concerning about the B92 protocol which involves only two non-orthogonal states ( Bennetl] . Il992() . we can try to 
clone it with the largest probability. That is, by measuring a detector, we can make sure that the involved state is 
cloned perfectly or we know that the cloning process fails. The aim of this quantum cloning is to achieve the optimal 
probability. 



A. Probabilistic quantum cloning machine 

While the previous menti oned quantum cloning m achine s can always succeed, on the same time, the copies cannot 
be perfect. Duan and Guo (jPuan and Guol . Il998al lbl, [199J|) proposed a different quantum cloning machine: while the 
coping task can succeed with probability, but if it is successful, we can always obtain perfect copies. This kind of 
quantum cloning machine is called probabilistic quantum cloning machine. 

This quantum cloning machine is useful, in particular, in studying the B92 quantum key distribution protocol 
( Bennett) . Il992f) . In this QKD protocol, only two non-orthogonal states are used for key distribution so the attack 



is simply to use a specified quantum cloning machine to clone those two non-orthogonal states. In fact, this is 
the simplest cas e for probabilist i c quan tum cloning machine which is used to copy two linearly independent states 
S — {|4'o), |^[^i)} (|Duan and Guol . Il998bl ). The cloning transformation can be proposed as: 

U{\^o)\^)\mp)) = V^l^o)|*o)|™o) + VT^|<i>%p), 

ui\<f,}\i:}\mp)) = Vm\^i)\^i)\m,) + VT^I<i>W), (126) 

where \mp), |mo)), \mi) are ancillary states. The measurements are performed in these states. And the states |$5ib_p) 
and \^\bp) chosen so that the reduced state of P is orthogonal to |mo) and |mi). When the measurements 
are |mo) or |mi), we know the states S = {l^o); l^i)} are copied perfectly. Otherwise, the cloning task fails. The 
probabilities of success are rjo and rji for states j^'o) and l^*!), respectively. If we let rjo = rji = rj, we know that 

This is also a no-cloning theorem: only orthogonal states can be cloned perfectly. And the optimal probabilistic 
quantum cloning is to let 77 = 1/(1 + |(^'o|5'i)|). It is also related with the problem of how to distinguish non- 
orthogonal quantum states. 

The more comphcated case is to copy a set of linearly independent states S — {I'I'o), l^i) l^n)}- The form of 
the probabilistic cloning mahcine is: 

n 

|S)|Po)) = VT^\'^^)\^^)\Po)+yC,,\^\s}\P,}. (128) 



i=i 

Pq • ■ • Pn is a set of orthonormal ancilla states. Hence if the measurement result of the ancilla turns out to be Pqi '^e 
know the state is perfectly cloned, with the probability 7i. Taking the inner product of different i and j in ()128p . 
there's a matrix equation 

- Vfx(2)Vf = CCt (129) 

where — F = = diag{ji . . .7n}, Cij = Cij. If the input states |5'i)s are not linearly independent, 

X^^^ is not positive definite. And for generic positive definite matrix F, the right-handed side of (|129p is not positive 
semidefinite, hence the equation is not valid as the matrix CC^ is positive semidefinite. Hence such probabilistic 
cloning machine only exist s for linearly independe nt states (This result is also confirmed by Hardy and Song using 
the no-signaling argument ( Hardv and Son"3 . ll999l )V They then found the existence is equivalent to the positive 



semidefinitene ss of X ^ ^'^ — F. The result is called the Duan-Guo bound to distinguish linearly independent quantum 
states(Duan and Guol . Il998a[ ). The 1 — ?> M cloning machine is also easy to formulat e, just by adding the number 
of copies at the right-handed side of (|128p . Later, Zhang et a^.( Zhang et al\ . l2000b[ ) constructed a network using 
universal quantum logic states realizing this cloning machine. 



Later, Azuma et al. ( Azuma et al\ . 2005f) studied the case with suppl e ment ary information, that is, the jE) at 



the left-handed side of (|128p is state dependent. Li and Qiu ( Li and Qiul . l2007t) explored the case with two ancilla 
systems, but it is shown that the performance cannot be improved. 
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B. A novel quantum cloning machine 



For probabilistic cloning machine, Pati ( Patil Il999l ) explored the possibility that the output state contains all 



possible copies of the original state. That is, for a set of input states I'i'i) 
U in the following form: 



does there exist a transformation 



u{\^m\Po)) 



N' 

E 

k=M+l 



(130) 



the 1^2, 



J2^pf\'f^)'^^'+'^\o)'^^^-^^\Pj\ 

\Pn') is a set of orthonormal ancilla states, as usual. In fact, this can be regarded as a superposition of 
• • , 1 — > {M + 1) cloning machines. From the unitarity constraint, we have 



M 



k=l 



N' 

E 

l=M+l 



This equation can be rewritten as a equation of matrices 

M N' 



(131) 



(132) 



k=l 



Here Pk = P, 



d^ag{pi'\...,pi-^} 



l=M+l 

An - 



From this relation, they proved 



fc — "'"yii^fc ■ ■ TFk S y^^ij — as usual and F-^ 

if the states are linearly independent, then the equation can be satisfied with positive definite PkS and Fis. It's also 
simple to see the transformation doesn't exist if the set of input state contains a state that is a superposition of 
other states says l^*) = J2j since we can simply add the C7(|*)|I])|Po)) = Z]j C]U{\^ j)\T,)\Po)). And from the 

right-handed side of (|130p we can see that it is inconsistent. 

Under this framewor k, the cloning machine of Duan and Guo can be viewed as a special case of M = 1, see 
(jPuan and Guol. ll998bD 

Later, Qiu (|Qiu . l2002h proposed a combination of Pali's probabilistic cloning machine and the approximate cloning 
machine in the usual sense, which is a more general framework. The condition with supplementary information is 
also exp lored, that is, the |E) at the input side is state dependent. It is found that the probability of success may 
increase(jQi3,|2Q06|). 



C. Probabilistic quantum NOT gate 

Similar to the approximate universal NOT gate in the UQCM section in this paper, we can also construct a 
probabilistic NOT gate under the framework of probabilistic cloning. A 1 ^ 2 probabilistic NOT gate is proposed by 
Hardy and Song in (citation needed): 

n 

u{\^m\Po))^Vfm\^i)\Po)+Y.^^^\'^ABm)- im 

The input states are l^*!), . . . , l^'n), as usual. Taking the inner product of different we get 

X(i)=/X' + CC^ (134) 

where X'^^ — (vI'j|vI/j)(vl/rL|vi/J-) and other notation is same as above. If the input states are linearly independent, then 
the Gram matrix at the left-handed side of above equation is positive definite. Hence for a sufficiently small /, we 
can guarantee CC^ is also positive semidefinite. So such a cloning machine always exists. As a simple example, we 
consider the case n = 2, an = 021 — \/l — /, 012 = 022 — 0, then (|133p can be written as: 

1*1) ^ v^|*i)|*^)|Po) + VT^\^ab)\Pi) 

1*2) ^ y^\^2)\^i)\Po) + V^\^ab)\Pi). (135) 
In this case, we have a constraint of /: 

l-|(5'i|*2)| 1 

^ - " i+i(*ii*2)i ^^^^^ 



which is identical to the Duan and Guo case (|Duan and Guol . Il998b[ ). Li et al. (jLi et al 1 1200 <D extended the above 



case to the case where the output state contains all of |\E')|\E'-'-), \^)Yi>^)®'^, . . . , \^)\^^)®'^ . 
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D. Other developments and related topics 



Fiurasek ( Fiurasefl |2004[ ) used the technique described in the "Si nglet Monogam y" subsection in the UQCM part 
to analyze the optimality of probabilistic cloning machine. Li et al. (iLi et al. . 2009*) investigated the broadcasting of 
mixed state using probabilistic cloning machine. Wang and Yang (jWang and Yana . ,2009b,) studied the optimal proba- 
bilistic ancilla-free phase-coyariant qudit telecloning machine. Ji menez et al. studied th e probabilistic cloning of three 
symmetric states (jJimenez et al. I. l2010al) and equ idistant states ("Ji menez et all l2010bl ) . Zhang et al. studied proba- 
bilistic cloning of qu bits with real parame ters (jZhan g et al., 2010a) and the relation between probabilistic cloning and 
state discrimination (IZhang adboiObh. The relation be t ween this cloning machine and states discrimination is also 
studied in (jFeng et all l2005l) and in (IChefles and Barnettl . [19981 ) . The minimum-error discrimination between mixed 
states of the amb iguous case is studied in (lQiul.l [2008f) . The optimal unambiguous discrimination of two density matri- 
ces is studi ed in (iRavnal and Lutkenhausl 20051) . The optimal observables for minimum-error state discrimination is 
studied in (iNuida e t all I201QD. By homodyne detection, distinguishing two single-mode Gaussian states is studied in 
(jNha and Carmich acl. 2005). It is also shown that accordi ng to Wigner-Araki - Yanase theorem that the repeatability 
and distinguishability cannot be reached simultaneously ("Mivade ra and Imail . 12006b'). also to distribute a quantum 
state to a coup led two s ubsys tems, the strength of interaction should be above a threshold [Miyadcr a and Imai, , 2006a) . 
Then Mishra i Mishral . l2012[ ) investigated the unambiguous discrimination of two squeezed states usi ng probabilistic 
cloning. The scheme to implement probabilistic cloning of qubits via twin photons is proposed in fAran eda et all 
[2012). The realization scheme by GHZ sta tes is proposed by Zhang et al. in (Zhang et al . 2000a) . The assisted 
cloning is proposed by Pati in ( Patil . |2000[ ). Experimentally, the accuracy of quantum state estimati on is studied 
which is also compared with asymptotic lower bound obtained theoretically by Cramer-Rao inequ ality (lUsami et all 
[2003). The probabilistic quantum cloning experimentally realized in NMR system is reported in (IChen et a/.l . l201lh . 
By generalizing the probabilistic cloning to state amplificatio n, the experimental heral ded amplification of the photon 
polarized state and entanglement distillation are reported in ( Xiang et all\20ldi ) and ( Kocsis et !al],[20ll- 
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V. PHASE-COVARIANT AND STATE-DEPENDENT QUANTUM CLONING 

In last section, we studied the quantum cloning machines which are universal. That is the case that the input 
states are arbitrary or we know nothing about the input state. Practically, it is possible that we already know partial 
information of the input state. The point is whether this partial information is helpful or not for us to obtain a better 
fidelity in quantum cloning. In this section, we will show that depending on specified input states, we can design 
some quantum cloning machines which perform better for those restricted input states than that the universal cloning 
machines. 

On the other hand, one of the most important applications of quantum cloning is to analyze the security of quantum 
key distribution protocols. In security analysis, the quantum states transfer through a quantum channel. We suppose 
that this quantum channel is controlled by the eavesdropper who is generally named as Eve. Eve can perform any 
operations which is allowed by quantum mechanics. One direct attack is the "receive-measure-resend" attack where 
"measure" can be supposed to be a quantum operation. However, quantum mechanics states that non-orthogonal 
quantum states cannot be distinguished perfectly. So the measured results will in general not be perfect and thus the 
obtained measurement result is not the original sent state. This will induce inevitable errors which can be detected 
by public discussions between the legitimated sender and receiver, Alice and Bob, in QKD. 

Eve can choose freely her attack schemes. The quantum cloning machines provide a quantum scheme of eavesdrop- 
ping attack. We just assume that the Eve has an appropriate quantum cloning machine. By quantum cloning. Eve 
can keep one copy of the transferring state and send another copy to the legitimate receiver. Bob. Now Eve and Bob 
both have copies of the sending state. By this process, we can find how much information can be obtained by Eve, 
and on the other hand, how much errors are induced by this attack. This provides a security analysis of QKD. In 
this eavesdropping. Eve intends to get some information secretly between Alice and Bob's communication and wish 
to make the least possibility to be detected. So the optimal quantum cloning machine is required. Based on different 
QKD protocols, various cloning machines are designed specially. The universal quantum cloning machines studied in 
the previous sections themselves might be optimal. But it may not be optimal for the quantum states involved in a 
special QKD protocol. So the state-dependent quantum cloning machines are necessary. In this section, we will give 
all the examples of state-dependent cloning. 



A. Quantum key distribution protocols 

In this subsection, we intend to refer some quantum key distribution protocols and show how the eavesdropper 
attacks them. Each protocol may lead to a special kind state-dependent cloning machine. Initial protocols are based 
simply on 2-dimension sys tem and later they are gener alized to higher-dimension. Next, we present in detail the 
wel l-known BB84 pro tocol ( Bennett and Brassardl [l984l) and briefly its generalizations. An earlier review of QKD is 



in (|Gisin et al\ . \200'A . 



1. BB84 protocol ( Bennett and Brassardl [19841 ) uses two sets of orthogonal 2-level states and intersection angle in 



Bloch-sphere between different sets is 90°. They can be written as following, see FIG HI 

|0),|1), 

-l=(|0) + |l)),i=(|0)-|l)). (137) 

Note that by operating a unitary transformation, characteristics of these states remain unchanged. Therefore, 
we may also use the following four states in BB84 protocol which are still two sets of orthogonal 2-level states 
with 90° intersection angle, also see all those states in FIGH] 



^(|0)±|1)), 

i=(|0)±i|l)). (138) 

In BB84 protocol, Alice sends one of these four qubits to Bob through a certain quantum channel which is 
controlled by Eve. After receiving the qubit. Bob measures the obtained qubit with one of the two bases 
randomly. After Bob has finished his measurement, Alice would announce the bases of each qubits. If their 
bases coincidence, Bob's measurement result is surely correct. Alice and Bob will share a common secrete key. 
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If sending basis and the measurement basis are different, they simply discord this bit of information. Also they 
may use some qubits as the checking qubits to find out the error rate introduced by the quantum channel. They 
can suppose that all errors are caused by Eve's attack. 

The eavesdropper, Eve, will capture the qubits in the quantum channel and clone them. She remains one part 
to copies and still sends the other part to Bob in the quantum channel. As soon as Alice broadcasts the bases. 
Eve measures her own qubits sequentially to derive the information sent between Alice and Bob. 

This BB84 protocol is proved to be unconditional secure and the security is based on principl es of quantum 
mechanics. T he security proofs of BB84 protocol are given by several groupsjFor example Mayers (iM aveilboOll) . 
Lo and Chau ( Lo and Chaul . [l999l ) . Shor and Preskil (,Shor and Preskill .200Cii) . We remark that Ekert proposed 



a QKD strategy based on the non- locality of quantum mechanics ( Ekertl . Il99l[ ) which is the same of the BB84 
protocol. 



2. B92 (lBennettl . 1199 2') is a protocol which uses any two non-orthogonal states. Tamaki et al. ()Tamaki et ad . [20031 ) 



provide the security proof of this protocol. In this review, we suppose those two states take the form, 

i=(|0)+e'*Ml)),fc = l,2. (139) 



3. BB84 protocol can be generalized to 6-state protocol! BruCl [19981 ). The six states involved in this protocol are 



BB84 states plus two more states as shown in Eq. (|124p . Interestingly, the optimal cloning of those six states is 
the universal quantum cloning machine as already shown in previous sections. 

4. For higher- dimensiona l case, t he QKD protocols can use 2-basis or d -I- 1-basis in a d-level system as studied by 
Cerf et al. ((Cerfilal[, [20023) . 



In d-dimension, there are altogether d-l-1 mutually unbiased bases (MUB), prov ided d is prime. Any ((7-|-l)-basis 
from those MUBs, g = 1, 2, d, can actually be used for QKD (jXiong et all l2012j . Here, we briefly give the 
definition of MUB, and {!«''"''')} {k = 0, 1, d — 1), they are expressed as: 



rik)^, = OJ''-'^-^^-'"'' |j), (140) 







with Sj = j + ... -I- (d— 1) and uj = e^^d . These states satisfy the condition, \{i^''^\l^^^)\ = SkjSu + -^(1 — Skj). 
States in different set of bases are mutually unbiased. 

6. Basing on the characteristics of MUB, we can design a retrodiction protocol using method of mean king game. 
This special protocol, different from BB84 or other QKD protocols, shows that Bob has a 100% successful 
measurement scheme in comparison with the 1/(17-1- 1) successful measurement in such as BB84 protocols. Here 
we remark that quantum memory is not available for Bob. We will present a detailed analysis of this retrodiction 
protocol. 



B. General state-dependent quantum cloning 

As to the above QKD protocols, universal quantum cloning machine is sure to work well, but not surely to be the 
optimal one. Thus if we need a higher quality of the output from the cloning machine, a state-dependent cloning 
machine is needed. In fact, each protocol corresponds to a special kind of state-dependent cloning machine based on 
the given ensembles of states. 

Let us f irstly consider a general case based on two equatorial states. Obviously, it is equivalent to the B92 protocol 
(|Bennettl . [l993 ). To be non-trivial and satisfy the B92 protocol, these states are nonorthogonal. The cloning machine 



is designed to clone only these two states optimally a nd equally well without considering other states on the Bloch 
sphere. This problem is studied in ( BruB al[ . Il998a[ ). 



The quantum cloning machine takes a completely unknown 2-level state and makes two output qubits. Each 
output state is described by a reduced density matrix with the following form, 

P = VWW + {1-V)1- (141) 
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Here, 77 described the shrinking of the initial Bloch vector s corresponding to the density matrix In other 

words, the output state is 

1 + ris ■ a 

with the input state being 

|V')(V'l = ^if^. (142) 

We assume that any quantum cloning machine satisfies the following reasonable conditions according to requirement 
of all QKD protocols: First, pi = p2, which is called symmetry condition. Second, F = Tr{p^pi) = const. ^ which 
is called isotropy condition meaning that the fidelity between each output and the input does not depend on the 
specified form of the input. Stronger condition si — rj^ip is required by orientation invariance of the Bloch vector. It 
is obvious that when the last condition is satisfied, the second will be satisfied. 

Next let us investigate the explicit form of the quantum cloning machine. Brufi et al. (jBrui3 et al\ . Il998al) make a 
general ansatz for the unitary transformation U performed by the cloning machine. They are, 

C/|0)|0)|X) = a\m)\A) + 6i|01)|Bi) + 62|10)|B2) + c|ll)|C), (143) 
U\1)\Q)\X) = ~a\n)\A) + 6i|10)|Bi> + 62|01)|B2> + 5|00)|(7). (144) 

where \X) is an input ancilla. And \A), \Bi), ... denote output ancilla states. Ancilla states may have any dimension 
but are required to be normalized. There are several constraints for these parameters. Thanks to the unitarity of the 
cloning transformation, the complex parameters a,bi,c... satisfy the normalization conditions: 

|ap + |5ip + |62p + |cp = l, 

|ap + |6ip + |&2p + |5p = l, (145) 

and the orthogonality condition: 

a*c{A\C} + blh{B2\Bi) + blb2{Bi\B2) + c*a{C\A} = 0. (146) 

Assume that the cloning machine works in symmetric subspace, more relations are derived 

l&il = I&2I, l&il = I&2I, 
\{B,\B2)\ = \{B2\B^)\, \{B,\B,)\^\{B2\B2)\, (147) 

and 

abl{Bi\A) + c*b2{C\B2) - ab*{B2\A) + c*b^{C\B{), 
b\a{Bx\A) + a*bi{A\Bx) = b2a{B2\A) + h* b2{A\B2) , 

blc{Bi\C) + c*bi{C\B{) ^b*c{B2\C) +c*b2{C\B2). (148) 
Moreover, letting shrink factor remaining constant ratio within each direction in Bloch sphere, one has, 

^ = ^ = (149) 

^tpx '^''Py ^"Pz 

Applied in the transformation, we may derive further constraints: 

|„p_|,|2^|^|2„|5|2 



or 



|2 



^Re[bi a{Bi\A) +a*bi{A\Bi) 



Im[bi a{Bi\A) + h*bi{A\Bi)] = 0, 
bld{Bi\C)+c*bi{C\Bi) =0, 
b*2a{B2\A} + c*bi{C\Bi) ^ 0, 
b2*a{B2\A)+c*b\{C\Bi)^0, 
c*a{C\A) ~a*c{A\C) =0, 
and symmetrically, 1 o 2. (150) 
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Here, notation 1 2 indicates the above constraints changing indices 1 with 2 according to the symmetry condition. 
Our task is to maximize the shrinking factor rj with its explicit form taken as, 

r?=|ar-|cr (151) 

The fideUty which is defined as 

F = Tr(pi|^)(V|) = ^(l + sl-4) (152) 

is related to the shrinking factor as 

F= 1(1 + 7?). (153) 

Note that that this relationship between fidelity and shrinking factor holds only for pure states. The study of mixed 
state has already been presented in the previous sections. The above discussions are regardless of the specified QKD 
protocols. 



C. Quantum cloning of two non-orthogonal states 

Next, we will consider the situation of B92 protocol in which only two qubits are required to be cloned. Now, we 
firstly prove that ancilla is necessary in our cloning machine. Without ancilla, we could write down constraints as: 
|ap - |c|^ = |ap - |c|^, |ap - |cp = Re[bi a + d*bi], b^a + c*bi = 0, and 62 a + c*bi = 0. Adding symmetric ansatz, 
we have = I62I = \b\ and l^-i] = Ih] = \b\- 

From these constraints we would have four possible results: (a),|a| = |c| and \a\ = |c|, (b), \a\ = \c\ and |6| = 0, 
(c), \b\ = and \a\ = |c|, and (d), \b\ = 0, and \b\ = 0. For each case, we have r] = which seems meaningless. 
Consequently, it is impossible to generate a symmetric quantum cloning machine without ancilla. 

In the following, we will explicitly give the form of the quantum cloning machine and the fidelity in this case. 
Assume two pure states in a two-dimensional Hilbert space with expressions: 

\a) = cos6'|0) +sin6»|l), (154) 
\b) = sin6»|l) +cos6»|0), (155) 

where 9 varying from to 7r/4. Define S = {a\b) = sin 2^. We may imagine that the fidelity only dependents on S 
because we could transform every 2 states into the above form by only unitary operation without influence the fidelity. 

Since there are too many constraints to give strict algebraic calculations, we utilize the symmetry in the B92 
protocol to simplify the calculations. Performing an unitary operator U on the input states, we define final states \a) 
and 1/3) as 

|a) = [/|a)|0),|^) = [/|6)|0). (156) 
Since U is an unitary transformation, we could derive 

(a|/3) = (a|6) =sin26i = S'. (157) 
Using global fidelity Fg to evaluate the quantum cloning, which is defined as 

Fg = ^{\{a\aa)f + mbb)f) (158) 

Certainly, optimal cloning machine needs that both \a) and |^) lying in the space spanned by vectors \aa) and \bb). 
Without complicated calculations, we would obtain maximal global fidelity as 

Fg = i(\/l + sin2 26l\/l + sin26i + cos26l\/l - sin26l)^ (159) 
Additionally, we are also interested with the local fidelity of each output qubit with the input one, which is defined 

as 



Fi=Tr[pa\a){a\]. 



(160) 
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The explicit result is, 



Ir l-'5'2 52(1 + 5), , , 



We may notice that it is larger than 5/6. That is to say, for this protocol, state-dependent cloning machine works 
better than UQCM as expected. It is also noticed that the Bloch vector not only shrinks but also makes a rotation 
with a state-dependent angle 'd: 

i? = arccos[^^22lE=]-20. (162) 
m VI + sin2 26' 

This is caused by that one constraint presented previously is released. 

We should emphasize that this result is derived under the request of maximum global fidelity rather than maximum 
local fidelity. When we only need a better state-dependent cloning machine locally, we may have different consequences. 
And the fidelity is given by: 



^i,3 = i + + ^)(3 - 35 -f - 25 + 952) X y^-1 + 25 + 352 + (1 - S)^fV- 2S + 9^2. (163) 

Moreover, it could be tested that the minimum value F;^3 « 0.987 is derived when 5 = 1/2. And when 5 = and 
5 = 1, one finds F = 1 as expected. 

In addition, we should note that different concerning in the eavesdropping would lead to variant results. In B92 
protocol, direct cloning is not the most advisable action for Eve if she wishes to be most surreptitious. In fact. Eve's 
main purpose is not to clone the quantum information which is embodied in the two nonorthogonal quantum states, 
but rather to optimiz e the trade-off between o btaining most classical information versus making the least disturbance 
on the original gubi tdFuchs and Peresl Il996[) . We may name it the optimal eavesdropping which is different from 



optimal cloning. In ( Brufi et all\l998ei} . fidelity for optimal eavesdropping is expressed as 



i^i,2 - ^ + ^ \/(l - 252 + 253 + 54) + (1 - 52)v/(rT5)(l -5 + 352 (164) 



Note that, for all 5, F12 > ^],3- 

Here we have a short summary, the general state-dependent cloning machine works better than UQCM when applied 
to a certain number of states. We give the special case of two nonorthogonal pure states. It is obviously that, if we 
know the ensemble of states used in one QKD protocol, state-dependent cloning machine can be designed accordingly. 
Besides for QKD protocols, various quantum machines themselves are of fundamental interest s. As an extension 
of B9 2 protocol, Koashi and Imoto considered the quantum cryptography by two mixed states ( Koashi and Imotol . 
I1996D . 



D. Phase-covariant quantum cloning: economic quantum cloning for equatorial qubits 



In this subsection, we will discuss quantum cloning machine for BB84 states, which is first studied in (jBrufi et all 
l2000al) . For convenience, we will also refer those four states {(|0) ± |1))/V2, (|0) ± i|l))/V2} as the BB84 states. In 
fact, the cloning machine of BB84 states is proved to be able to copy all equatorial states optimally. It has a higher 
fidelity than that of the UQCM. Moreover, this kind of quantum cloning machine is able to work without the help of 
the ancilla states. It is thus the economic quantum cloning. 

It is interesting to find that any quantum cloning machine that clones BB84 states equally well will also clone 
equatorial states with the same fidelity. We know that the equatorial qubits are located on the equator of the Bloch 
sphere which take the form, |7/;(0)) = (|0) e''^|l))/V2 see FIGH Since each output qubit can be represented as the 
mixture of input state and the completely mixed state and the corresponding fidelity does not depend on the phase 
(j), this kind of cloning machine is "phase covariant" . It is named generally as the phase-covariant quantum cloning 
machine. 

Consider a completely positive map T that could clone optimally the four states of BB84. Perform T on those 
states would lead to approximate result: 

T[\ ± x){±x\] = r]| ± x){±x\ + (1 - r^)^, (165) 

T[| ± y){±y\] = ,71 ± y){±y\ + (1 - 77)^. (166) 
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FIG. 4 The equatorial qubits are qubits which are located on the equtor of the Bloch sphere. The optimal cloning machine for 
those states is the phase-covariant quantum cloning machine. This machine is also optimal for cloning BB84 like states. 



On the other hand, equatorial states could be written as 

1 



= -(I + eos^CTj, + sm(l3(Ty). 



(167) 



This is the qubits in x — y equator. Similarly we have qubits in x — z equator such as BB84 states and iny — z equator. 
Perform linear operation T on it and consider T(I) — I, we derive 



Tumi^i] = ii\^mmct>)\ + (i - v)l 



(168) 



The shrinking factor rj remains unchanged. Therefore, we could conclude that optimal cloning machine performed for 
the BB84 states is equivalent to phase covariant cloning machine. 

Next, we release the above constraint that the single output qubit takes the scalar form ()168p . We only need that 
the fidelity does not depend on the phase parameter (/) in quantum cloning. We fist consider the economic case, which 
is accomplished with out ancilla. Phase-covari ant quantum cloning machine is presented in the following as proposed 
by Niu and Griffiths (|Niu and GrifRthsl . Il999l) . 



|0)|0)^|0)|0), 

|1)|0) ^ cosr/|l)|0) +sin77|0)|l) 



(169) 



where rj e [0,7r/2] means the asymmetry between the two output states. And when rj — 7r/4 the two output states 
are equivalent, corresponding to the symmetric case. 

For any equatorial state IV'l'/')) = :72^l'^^ ^^'^1-'^)) which is the input state, we have 



|V'(<?!>))|0) ^ ^(|00) +cos77e*'^|10) +sin77e"^|01)). 
v2 

So we could easily obtain the reduced matrix of each states. 

Then, as to any equatorial state \tp{(p)), we have fidelity defined as = {1p\p\^p): 

Fa = i(l + COS77), 
Fb = i(l + sin7/). 

Obviously, fidelities are independent of 4> as expected. Particularly, for symmetric case rj = 7r/4, the fidelity is 



(170) 



(171) 

(172) 
(173) 



F = 1/2 + I/VS w 0.85355 > - « 0.833333. 



(174) 



41 



In other words, phase covariant cloning machine behaves better than UQCM in cloning equatorial states. Phase- 
covariant quantum cloning machi ne can also be realized with ancillary states in a different form. The related result s 
of phase cloning can be found in (|Acm et aLl . r20n4bl : lBrui:i et aLl . l2nn0al : lDurt and Dil 120041 : iGriffiths and Nid . ll99/Il . 
The experimental implementation of t his scheme is reported in optics system and nuclear magnetic resonance system 
(ICernoch et adl200alDu et a/.l . 120051) . 



E. One to many phase-covariant quantum cloning machine for equatorial qubits 

For quantum cloning, we are always interested in the case that multi-copies created from some fewer identical input 
states. The simplest extension of 1 2 is one to many quant um cloning, i.e. 1 — » M p hase-covariant quantum cloning. 
Based on the cloning transformations similar to the UQCM ( Gisin and Massailll997t ). for arbitrary equatorial qubits, 



1^) = (I t) + e^'^l it is assumed that the cloning transformations take the following form ( Fan et oil . 1200 Ibl ). 

Af-l 

Ui,M \t)'»R ^ ^ I (M - J ) t, J I) Rj 



3=0 

Ui,m\ i) <^ -R = aM-i-j\{M t, U + 1) i) Rj, (175) 

3=0 

where R denotes the initial state of the copy machine and M — 1 blank copies, Rj are orthogonal normalized states 
of the ancillary (ancilla), and \{M — j)ip, j)ip±) denotes the symmetric and normalized state with M — j qubits in 
state and j qubits in state V'-L • We already know the result of universal case: For arbitrary input state, the case 



— . /KM-Jl. is |;i^g optimal 1 — ^ M universal quantum cloning ( Gisin and Masseiil Il997t ). 



~ V M(M+1) 

Next we consider the case that the input states being restricted to the equatorial qubits. It is assumed that phase- 
covariant transformations satisfy some properties: it possesses the orientation invariance of the Bloch vector and that 
the output states are in symmetric subspace which naturally ensure that we have identical copies. The unitarity and 
the normalization is satisfied by X]^o^ '^'j ~ ^' ^® now wish that the optimal phase-covariant cloning machine can 
be achieved. Let us see fidelity which is found to take the form, 

F-i[l + r;(l,A/)], (176) 



where 



M-l ^] 



77(1, M) - V a,aM-i-,^^^^. (177) 

From this result, it is straightforward to examine two special cases, M = 2, 3. For M = 2, we have + = 1 and 
77(1, M) ~ \f2oiQOL\. In case ao = ai = \ j the fidelity achieves the maximum. For M = 3, we have a^ + a^+a^ = 1, 
and 

r?(l,3) = ^a?-t--^aoa2. (178) 

For — a2 — 0,ai = 1, we have 77(1,3) — |, which is the optimal value and it reproduces the case of quantum 
triplicator for x — y equatorial qubits as presented below, 

1 1> ^ ^(1 m> + 1 nt> + 1 itt)), 
I i) ^ -i=(i ut) + 1 ;n) + 1 m)). 

(179) 

Note that the fidelity of this quantum triplicator is 5/6 which is the same as the 1 — > 2 UQCM. 

We next review the result of 1 to M phase-covariant quantum cloning transformations. When M is even, we suppose 
aj = a/2/2, j = M/2 — 1, M/2 and aj = 0, otherwise. When M is odd, we can suppose aj = l,j = [M — l)/2 and 



42 



aj = 0, otherwise. The corresponding fidehties are F — ^ + 4^m^^ ~ fo^' ^ even, and F ~ ^ + ^^4m^'' for M is 
odd. The exphcit cloning transformations have aheady been presented in (jl75p . 

The above fidehties for M = 2,3 cases are optimal, we next prove t hat for general Af, the fidelities achieve the 
maximum as well. The method introduced in ( Gisin and Massan . Il997t ) can be also applied in this phase-covariant 
case. For convenience, we consider the general N to M cloning transformation. By expansion, the N identical input 
states for equatorial qubits can be written as, 

N 

I^^^AT ^ ^ e^^-^C^KTV - j) t, J ;). (180) 

3=0 

The most general N to AI quantum cloning machine for equatorial qubits is expressed as 

M 

\{N - j) t, J ;) ® i? ^ ^ |(Af - k) t,ki)<E> \R,k), (181) 

fe=0 

where R still denotes the M — N blank copies and the initial state of the cloning machine, and \Rjk) are unnormalized 
final states of the ancilla. By using the unitarity condition, we know, 

M 

Y,{Rrk\R,k)^5,,,. (182) 

fc=0 

The fidelity then takes the form 

= (vi/|p°«*|*) = {Rrk'\R,k)A,,t,,,k, (183) 

j' M ,j,k 

where p°"* is the density operator of each output qubit by taking partial trace over M — 1 output qubits with only 
one qubit left. We impose the condition that the output density operator has the property of Bloch vector invariance, 
and find the following for = 1, 



Aj'k']k - ■^\Oj'jOk'k + {i^- Qrj)[Qk',(k+i) 



V(Af-fcO(fc- + l) 

+Ok,{k'+i) jTj^ Jl, (184) 

where — 0,1 for case = 1. The optimal fidelity of this cloning machine for equatorial qubits corresponds to 
the maximal eigenvalue \max of matrix ^4 by F = 2Amaa; ( Gisin and Massail , Il997f) . The matrix A (|184[) is a block 
diagonal matrix with block B given by. 



1 / 1 



V(M-fc)(fc+l) 



Thus we now can confirm that the optimal fidelities of 1 to M cloning machine for equatorial qubits takes the form. 



1 , JM{M+2) . 

2 + ' M IS even, ^ggx 

l^iM±A Mis odd. ^ ^ 



2 ' 4M ' 

Explicitly, the corresponding 1 — > M optimal phase-covariant quantum cloning can be written as: 
1. M is even, suppose M — 2L, we have 

It) ^ ^i(i + i)t,(i-i);>®i?o + +^i^t,i;)®i?i, 

U) ^ ^|Lt,L;)®i?o + ^l(i-i)t,(i + i);)®i?i- (187) 
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2. M is odd, suppose M = 2L + 1, we have 



t) 



|(L + l)t,ii), 



(188) 



Note that those transformations (|187|) have ancihary states Ro,Ri. The simplest economic case without these ancillary 
states has been presented in (|169p . The general economic case equivalent with Ea. (jl87p can be written as, 



t> ^ i(i + i)t,(i-i);) 

;) ^ \Lt,Li). 



(189) 



The optimal phase-covariant quantum cloning for the general N ^ M case still seems elusive, some related results 
and the phase-cloning of qutrits can be found in (iD'Ariano and Macchiavelloll2003l ) . The one to three phase-covariant 
quantum cloning is realized in optics system ( Sciarrino and De Martinil . 2005[ k 



F. Phase quantum cloning: comparison between economic and non-economic 

It seems that phase quantum cloning with input = ^Tf^l'^^ ~^ e*'^|l)) can be realized by both economic and 
non-economic transformations with completely the same optimal fidelity. We suppose that qubit implemented by 
quantum device is precious, so we should prefer to economic phase cloning. 

On the other hand, there exist some subtle differences between those two cases which are not generally noticed. 
For convenience, let us present explicitly those transformations. From the general results in Eq. (|187p . the optimal 
phase-covariant cloning transformation takes the form, 

|0)^i=|00)|0). + i(|01) + |10))|l)., 

|l)^-i=|ll)|l), + i(|01) + |10))|0),, (190) 

where the subindex a denotes the ancillary state. With the help of Eq. (|189|) . the economic phase-covariant cloning 
takes the following form, which is also presented in Eq. ()169| ) and here we choose asymmetric parameter 77 ~ 7r/4, 

|0) ^ |0)|0), 

|l)^-i=(|l)|0) + |0)|l)), (191) 
We already know that the fidelities of both economic and non-economic are the same and optimal, see Eq. (|174p , 

Foptimal = 2 + 'j^- (192) 

The single qubit reduced density matrix of output from (|190|) can be calculated as, 

p,ed. = ^|^)(^|+|^-\/^)l-| 1 (193) 

It takes the scalar form, i.e., the single output can be written as a mixture of input qubit and a completely mixed 
state 1/2. 

In comparison, the single qubit reduced density matrix of output from economic case is, 

Pred. = i f j ■ (194) 

This form does not satisfy the scalar form. It also means relation T{T) = I is not satisfied. 

In eavesdropping of well known BB84 QKD, because all four states |0), |1), l/\/2(|0) + |1)), l/\/2(|0) - |1)) can 
be described by j^*) = cos0|O) -I- sin0|l). So, instead of the UQCM, we should at least use the cloning machine for 
equatorial qubits in eavesdropping. A ctually in individual attack, we can not do better than the cloning machine for 
equatorial qubits ( Brufi et"an . l2000al ). The cloning machine presented in equations (|191I190|) can be used in analyzing 




the eavesdropping of other two mutually unbiased bases l/\/2(|0)-|l)), 1/V2(|0) + |1)), l/\/2(|0)+i|l)), l/V2(|0)-i|l)) 
which belong to IV") = (|0) + e"l'\l))/V2. 
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G. Phase-covariant quantum cloning for qudits 

The phase quantum cloni ng: can be apphed to higher dim ensional syste m. For qutr i t case, the optimal fidelity was 
obtained by D'Ariano et a/.l D'Ariano and Lo Prestl l200ll) and Cerf et aLI Cerf et al I l2002bD : 

F = , for d = 3. (195) 

In this review, we consider the general case in d-dimension ( Fan et all . l2003[ ). 

The input state is restricted to have the sample amplitude parameter but have arbitrary phases 

where phases G [0, 27r), j = 0,-- - ,d—l. A whole phase is not important, so we can assume 0o = 0. For comparing 
the input and the single qudit output, here we write the density operator of input as p'^™^ = 2^jk^^'''^^''^^^\j)i^\- 
Our aim is to find the optimal quantum cloning transformations so that each output qudit is close to this input density 
operator. 

Considering the symmetries, we can propose the following simple transformations, 

U\j)\Q) = a\jj)\R,) + ^^ |j(b7) + (197) 
^y2[d - Ij 

where a,/3 are real numbers, and + fi'^ — 1. Actually letting a,/3 to be complex numbers does not improve the 
fidelity. \Rj) are orthonormal ancillary states. 

Substituting the input state (|196p into the cloning transformation and tracing out the ancillary states, the output 
state takes the form 



P 



(out) . 



+{\ij\) + m + mm\] 

E ^'^"^''"^'Hm + \imij'\ + ifii)- (m 



Then, we can obtain the single qudit reduced density matrix of output 



d 

3 



The fidelity can be calculated as 



Now, we need to optimize the fidelity under the restriction + ~ 1. We can find the optimal fidelity of 1 to 2 
phase-covariant quantum cloning machine can be written as 

1 1 



Fopumai = - + —{d-2+^d^+M-4). (201) 



The optimal fidelity is achieved when a, /? take the following values 

'1 d-2 



2 2y/d^ + 4d - 4 

1 d-2 

2 2Vd2 + Ad -4 



+ . (202) 
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In case d = 2,3, this results reduce to previous known results (I174I195|) . respectively. As expected, this optimal 
fidelity of phase-covariant quantum cloning machine is higher than the corresponding optimal fidelity of UQCM, 

^optimal ^ ^universal — {d -\- 3)/2(c? + 1). (203) 

These are the optimal phase-covariant quantum cloning machine for qudits (11971 1202p and the optimal fidelity (|201l) . 



H. Symmetry condition and minimal sets in determining quantum cloning machines 

In this subsection, we will mainly discuss how symmetry condition determines the form of quantum cloning machine. 
We will also consider the minimal sets in determining those quantum cloning machines. 

As we shown, the number of BB84 states is four. The optimal cloning of those four states actually can clone 
optimally arbitrary corresponding equatorial qubits. This means that BB84 states are enough in determining the 
phase-covariant quantum cloning machine. We would come up with a question that whether they are the minimal 
input sets necessarily for the phase-covariant cloning. It is revealed that the set of BB84 states is not the minimal 
input set. The minimal set which determines the phase cloning machine is supposed to possess the highest symmetry 
in Bloch sphere with the number three. Here, we give a brief proof. 

Consider three input states -^(10) + e*'^|l)) where = 0, 27r/3, 47r/3 which are finite numbers. We suppose that 
the quantum cloning machine works in symmetric subspace and is economic. The most general form can be written 
as, 

|0) ^ a|00) + 6|01) + c|10) + 

|1) ^e|00) + /|01) + <?|10) + /i|ll), (204) 

where a to h are complex numbers which satisfy constrains |ap + |6p + |cp + |dp = l,|ep + |/p + jyp + \h\'^ = 1 and 
ae* -\- bf* + eg* + dh* = due to orthogonal and normalizing conditions. Because the machine works in symmetric 
subspace, we have b = c and f = g. It is easily calculated that the fidelity for arbitrary input equatorial state is, 

FAi4>) - ^ + ^Re[ac*e^"t'^ + ag* + ec*e(2"^) + eg*e^"''^ + bd*e^"t'^ + fh*e^"''^ + fd*e^'^"^^ + bh*]. (205) 

Simplify the expression by utilizing constrains above, we find 

FA{(j)) = Ai cos(20 -f Vi) + A2 cos(0 -f V2) + A3, (206) 

where Ai,i = 1,2,3, are real numbers. Explicit expressions of these parameters are: Ai = \\ec* + fd*\^ ipi = 
arg{ec* + fd*), ■02 = ^\ac* + eg* + bd* + fh*\, -02 = arg{ae* + eg* + bd* + fh*), and X3 = ^ + \Re{ag* +bh*). 

Additionally, we let the cloning fidelities for those three states being the same: i^(0) = F(27r/3) = F(47r/3). We 
will obtain two more constraints: Aisin'0i — A2sin?/'2, Aicos^^i -I- A2COS'02 = 0. With the help of some algebraic 
inequalities, one would find that F reaches its maximum value if and only if Ai = A2 = 0. Now we are ready to find 
a simple form of the fidelity for the three input states, 

Fa = A3. (207) 

Remarkably, this result demonstrates that for any 0, Fa is independent of the phase parameter 0. This cloning 
machine becomes the standard phase-covariant quantu m cloning machine. Note t hat the minimal set include three 
states which is studied from the viewpoint of detection ( Peres and Woottersl . Il99ll ). 



Other similar results are also ready here: 

1. For non-economic case, i.e., with the help of ancillary states, this conclusion remains correct. 

2. For 1 M cases, this conclusion still remains correct. 

As geometric symmetry only provides intuitive understanding in no more than three dimension, higher dimension cases 
may not be obvious. This might be explored further. Quantum cloning machine for 6-state protocol can be proved 
equivalent to UQCM which is discussed in the above section. It is similar to look for its corresponding determination 
sets by considering the symmetry, four states forming the tetrahedron with equivalent distance on Bloch sphere are 
the answer, see Fig. ([3]). 

Since phase quantum cloning is corresponding to quantum phase estimation. The minimal input set may shed some 
light on the quantum state estimation. It is also interesting to study quantum cloning machine working between two 
fixed latitudes in the Bloch sphere. Contrary to phase-covariant quantum cloning machine, the mean fidelity in the 
region does not remain increasing from equator to polar, but has a minimum value. 
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I. Quantum cloning machines of arbitrary set of IVIUBs 

Here, we discussed the higher dimension quantum cloning of the mutual unbiased basis(MUB). It is known that a 
Hilbert space of d dimension contains d + 1 sets of MUB, provided d is prime. In this review, when MUBs are used, 
we will restrict our attentions on case d is prime. We can design QKD protocols by using arbitrary sets of MUBs. 
For example, in 2 dimensional system, we have two well accepted QKD protocols, six-state protocol means 3 sets of 
MUBs and BB84 protocol means 2 sets. In higher dimension, we can also propose corresponding cloning machines 
for those sets of MUBs. 

Let us first present some characteristics of MUBs. In a system of dimension d, there are d + 1 MUBs 
( Bandvopadhvav et al\ . \200^ . namely {|z)} and {ji^'^-')} {k = 0, 1, ...,d— 1), are expressed as, 

N^'^) = ^E^'^'''^'''^b')' (208) 

with Sj = j + ... + {d — 1) and uj ~ e'^. Any states in the same set are orthogonal (i^^) IZC"')) = Su, and any states 
in different sets satisfying — k ^ j, that is their overlaps are the same. Define the generalized Pauli 

matrices ax and Cz as, a^j) = \j + 1) and crz\j) = ^■'b)- Note that, as usual, we omit module d in equations. 
Then there are d^ — 1 independent Pauli matrices = {o'x)™'{(''z)"' and Umn\j) = + m). Those MUBs are 

eigenvectors of operators cr^, <Jx{az)'', k — 0,1, d — 1, 

a.(a,)'^|?W) =w'|z«). (209) 

The result of MUBs can also be found in (jWootters and Fieldd . Il989l ). 

A straightforward generalization of BB84 states in d-dimension is two sets of ba ses from those d + 1 MUBs, and 
the generalization of six-state protocol is to use all d -t- 1 mutually unbiased bases ( Cerf et aZI . l2002al ) . Suppose two 
MUBs are {\k)}, k = 0,1,2, ...,d — 1 and its dual under a Fourier transformation, 

d-1 

10 = ^ Ve2"('='/'^)|/c), (210) 

where 1=0,1, 2,. ..,d-l. We follow the standard QKD, Alice initially sends the state li/;), Eve can use her quantum clone 
machine to copy the state and the transferring state is disturbed which is later still sent to Bob. Eve has a non-perfect 
copy of the sending state and the ancillary state of her quantum cloning machine. The whole system is written as, 

d-1 

\^)a^ ^ a7n,nUra.n\i')B\Bm-n)E.E', (211) 
m.n— 

where A,B,E, and E' represent Alice's qudit, Bob's clone, Eve's clone, and the cloning machine. Obviously, parameters 
am,n satisfy Yltnn=o |flm,nP = 1- As wc already know, \Bm-n)EE' stands for d-dimensional Bell states which is the 
maximally entangled states of two qubits with explicit form: 

N-l 

\Bm,n)EE' = ^ E e'"^'"/''^ I fc) B I ^ + ™) , (212) 

where m,n — 0,1, ...,d — 1. Note that the operators Um,n can be expressed as, 

d-1 

C/„^,„ = ^e2-(^-"/'^)|fc-Km)(fc|. (213) 

fe=0 

They actually form a group of qudit error operations where m represents the shift errors and n is related with the 
phase errors. Trace off the joint states within Eve, Bob's clone will be a mixed state, it is the same as the state 
passing through a quantum channel which will cause decoherence, 

d-1 

PB= \am,nfUm,nW{^P\Ul^,,. (214) 

7n,n—0 
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Therefore, when Alice sends states \k), Bob's fidehty is 

d-l 

F={k\pB\k) = Y.M^- 
Also, when Alice sends states \l), Bob's fidelity is 

d-l 



(215) 



(216) 



Consider the requirement that the doner works equally well with these states, we must choose the amplitude matrix 
as the following form. 



/u X ■ ■■ X 
X y ■■■ y 



(217) 



\x y ■■■ yj 

where a;, y and v are real number satisfying v'^ + 2{d — l)x'^ + (d — l)^j/^ — 1. In this way, we find Bob's fidelity is 

F ^v"^ + {d~l)x^. (218) 
Further, we find that the fidelity for Eve can be expressed as, 

Fe = v'^ + {d~ l)x'^ (219) 
where v' , x' and y' come from the Fourier transformation, 

d-l 

bm,n = -; e2-("'"'-™"')/'^a„^„.. (220) 



m' ,n'— 



The explicit form can be written as. 



x' = [v + {d-2)x+{l~d)y]/d, 

y' = {v-2x + y)/d, 

v' = [v + 2{d-l)x + {d-lfy]/d. 



Note that bmn comes from the following expression, 

d-l 



{U^n <E) Um-n X I) 



(221) 



(222) 



m,n— 



Our purpose is to maximize Eve's fidelity Fe under a given value of Bob's fidelity F . The trade-off relation can be 
found as, 



F , {d-l){l-F) , 2 . - 



(223) 



Next, we consider another protocol using all available d+\ bases. Similarly, by considering that the same fidelity is 
necessary for all used bases since they are applied randomly, we derive that amplitude matrix presented in Eq. (j217|) 
must satisfy x — y. Hence, Bob's fidelity is 



F ^v^ + {d~ l)a;2 = l-d[d~ l)x^ 



(224) 



and Eve's fidelity is. 



Fe = v'"^ + {d- l)x'^ = 1 - d(d - l)x'^, 



(225) 
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where v' and x' are expressed as 



x' — {v~x)/d 

v' = [v+(£ -l)x]/d. (226) 



The relations induce the trade-ofF between two fidehties of Bob and Eve. 

For higher dimension case, we may have more choices for QKD. Besides by using only two bases or all d + 1 bases, 
we may choose any sets of mutually unbiased bases. Then correspo nding cloning mac hines are necessary in analyzing 
the security. Those general QKD protocols are studied recently in ( Xiong et all . 20121 ). By using the same arguments 
about the symmetry, we can find. 



PB 



= J2 \amn\'^\i + m){i + m\, (227) 

ni.n—l 

P^B^ = E Wmn\'{U„.nmB){B{^^'^Ulj, (228) 
m,n— 

E \b^nf\i + m){i + m\, (229) 



Pe 



m,n—l 
d-1 



P^E^ - E l^™n|'(C/„™N('^)ij)(ij(?('%D, (230) 

m,n— 

where A; = 0,1,...,^ — 1. Therefore, one may easily derive the fidehties, 

Fb = El"o«l'' (231) 

n 

Pb^ = El"'".^™!^ (232) 

rn 

^ElE«™l'' (233) 

m n 

"7 E I E (234) 



fP 



n in 



(235) 



where k — 0,1, ...,g — 1. Assuming that Eve's attack is balanced, or we say she induces an equal probability of error 
for any one of the g + 1 MUBs, we have, 

Fb ^ Pj^^ = ... ^ F^g'-'\ (236) 

These constraints can determine the optimal doner. Eve could maximize all these g + 1 fidelities simultaneously and 
and let them equal. This is can be realized by "vectorization" of the matrix elements of (amn)- Define, 

= {ai^u, ...,ad^i,(d-i)i), {i = 0,1, g - 1), (237) 
A = {Ai,...,Ad-i), (238) 

d-l 

E ay(z = l,2,...,d-l), (239) 

3^0,1... ...Xg-l)^ 

and the rest elements are restricted by the following equations: 

Eko.f - FB~\aoo\^, (240) 
= Fb- laooP, (i = 0, 1, g - 1). (241) 
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FIG. 5 The fidelities of Bob and Eve for d imension d = 5. The number of mutually unbiased bases runs from 2 to 6. These 
results are presented in (|Xiong et aU[20l3 ). 



Finally, Eve's fidelity can be expressed as 



aoj\ 



i=0 



By maximizing Eve's fidelity, the above result can be further simplified by some algebraic considerations, 

V, TO = n 0, 

X, TO = 0, n 7^ or TO 7^ 0, ri = km, 
y, otherwise. 



where k = 0, ...,g — 1, and w is a real number to be determined and x = \/ , y = ■ ' ii^ii 



reach our conclusion that the fidelity of Eve is 

1 



{[„ + (d _ + (d _ + (rf - g)yY}. 



(242) 



(243) 



Now we 



(244) 



The only undetermined variable is u, we can change it so that the fidelity of Eve Fe reaches the maximu m depending 
on th e fixed fidelity of Bob. The fidelities of Bob and Eve are presented in FIGl5]for some special cases ( Xiong et al\ . 

I2Q12D . ^ 

From this conclusion, we may easily find out the results for 5 = 1 and g — d which lead to results in (jCerf et 



l2002a[ ). Also we are interested in the condition that Fg = Fe which is the symmetric cloning, and the remained 
variable v is fixed in this case which actually takes a rather complicated form, we finally have, 



d — g 



{9 + 3)-^{g + 3y-8 ^'-^f+'^ 



(245) 



As we know, the optimal doner for c? + 1 MUBs is actually equivalent to universal quantum cloning machine. It 
is interesting to know which of the above quantum cloning machine is equivalent to the phase-covariant quantum 
cloning machine. Stimulated by the fact that d MUBs presented in Ea. (|208p only contain phase parameters but the 
amplitude parameters are fixed, we may suppose that the d-dimension phase-covariant quantum cloning should be 
equal to the cloning of d MUBs. Indeed, let g = d—1, the fidelity p45p coincides with the phase-covariant fidelity in 
(I20ip . To further check that those two cloning machines are the same, we need also consider the asymmetric case. 

Let us consider the equatorial qudit as, It/j) — X]j=o ^'"^^ b)' where (j>j are phase parameters. One can assume 
that the asymmetric cloning transformation is given as. 



a\ii)\i) + 



Vd^ 



= ^{cose\ij) +sme\ji)\j)), 



(246) 
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where 9 is the asymmetric parameter. Therefore one can derive two fidelities for Bob and Eve, respectively, 

Fi = - + — ^Vd- lcos6i+ ^— ^ ^cos2 6', (247) 

^ i + ^^/d3T,in. + P'(d-2) ^^^^^ 
da a 

where we still have + = 1. Here we would like to emphasize, the exact value of a, (3 should depend on the 
parameter 6. For symmetric case, — it /A, their values can be found in Eas. (|202p . When 6 changes, the values of 
a,/3 also change. Numerical evidences show that those fidelities are the same with the fidelities in Eq. (|244p . 



J. Other developments and related topics 



In a short summary for this subsection, we have known that UQCM and phase-covariant cloning machine are just 
special doners for some sets of MUBs. We remark that the quantum cloning of sets of MUBs should be related 
with states estimation. The results of arbitrary state estimation and phase estimation are available which corre- 
spond to 5 — d,d — 1, however, the general g + 1 MUBs estimati ons are not yet studie d. For higher-dimension 
case, the cloning of states with only real para meters is studied in (iNavez and Cerj . |2003[ ). The asymmetric qudit 



phase-covariant quantum cloning is studied in dLamoureux and Ceri El). The qu=n cloning of set of spates 
which is invariant under the Weyl-Heisenberg group is studied by the e xtremal cloning machine (Chirib ella et all . 
I2OO5I ). Th e phase estimation of a ubits is studied in ( Derka et all Il998() . the case of qubits in mixed states is pre - 
sented in ( D'Ariano et all l2005al) . The ph ase estima tion of multiple phases is studied in ( Macchiavellol |2003() . 
Th e QKD in three dimension is stud i ed in (iBrufi and Macch iavcUo. 2002|). The four-dimensional case is studied 



in ( Bechmann-Pasauinucci and Tittell . l2000t iDurt and Naglerl . 120031 ). The optimal eavesdropping of BB84 states 



is studi ed in (IFuchs et all 119971). higher-dim e nsional case and some related results are presented by some other 
groups dAcin et all \200A bae and Acini. 120071: iBourennane et all I2OOII: iKarimipour et am2002 l : iKraus et all l2005t 
iNikolopo ulos and Alber '. '2005': Niko lopoulos et alii 20061 ) . The extension of BB84 states for qubits is also studied 



as the spherical-code (jRenes , 2004) . The comparison be t ween photon-number-splitting attack and quantum cloning 



attack of BB84 states is studied in ([Niederberger et al. . 2005). The ex tension of phase-covariant cloning to multi- 



partite quantum key distribution is studied in ('Scarani a nd Gisi ^■ 120011) . We should note that the security of QKD 
is generally defined by various criteria (,Gisin et al.. 2002), in th is review, we consider th e attack by the scheme of 
quantum cloning. Quantum copying of two st ates is studied in (Hillerv and Buzekl . Il997() . The cloning of a pair of 
orthogonally polarized photons is studied in (Fiurasek a nd Ce"rl. 2008). The q uantum cloning of states with fixed 
amplitudes but arbitrary phase is studie d in (Kar imipour and Rezakhanil . |2002). which is suboptimal while the ex- 
per imental scheme uses the optimal one (|Du et aLl . l2005D . The clo ning of states in a belt of Bloch sphere is studied 
m (|Hu et aLl . [2009l) . The case of distribution with mirror like symmetry, i.e., with known modulus of expectation of 
Pauli (Jz matrix is s tudied in (iBartkiewicz e~ al., 2009), the case of arbitrary axisymmetric distributi on on the Bloch 
sphere is studied in (IB artkiewicz and Mir anowicz. 2010), see also ( Bartk iewicz a nd Miranowiczil20l'^ . The economic 
realization of phase-c ovariant devices in arbitrary dimension, where phase cloning as a special case, is studied in 
( Buscemi et al 1 120071) . The scheme of o ne to three economic ph ase-covariant quantum cloning machine is proposed to 
be implemented by linear optics system (|Zou and Mathisl '2005*) . The one to many symmetric economic phase cloning 
is proposed in (Zhang et al., 2007), see also (Zhang and Ye, 2009.) . The scheme to realize economic one to many 



The assisted phase cloning of qudit by remote 



phase cloning for qubit and qutrit is proposed in (fZpu et all . .. ^ ^ . ^ ^ 

state preparation is p r esent ed in (iMa and Zhan ^ 2009t) . The network of state-dependent quantum cloning is studied in 
( Chefies and Barnettj . Il999|). see also ( Zhou . 201li) . The realization of phase-covariant and real qubit state quantum 
cloning are presented in ( Fang and Yd . 2010 ) . The phase cloning in spin networks is proposed in ( Chiara et all |2004[ ) . 
The relations between t eleportation be t ween dissipative channels with the universal and phase-covariant cloning ma- 
chine are anal yzed in (lOzdemir et aTl . l2007t ). The criterion for estimation the quality of state-dependent cloning 
is analyze d in jRastegLin", '2002). The proposal of optic al implem entation of phase cloning of qubits is presented in 



iFiuraseld 12003 ). the cloning of real state is studied in ( Hu et al 1 [20101 The one to many phase-covar iant quantum 



cloning is also analyzed by the general angular momentum formalism ( Sciarrino and De Martinil. 200 



, ^ „ „ I2OO7I). 

Experimenta lly, the asymmetric phase cloning is realized in optical system ( iBartuskova et all 120071 ) . and m 
(jSoubusta et al .. 2008). The ancilla-free phase-covariant cloning realized by Hong-Ou-Mandel interference is real- 
ized in experiment by Khan and Howell ( Khan and HoweUl . |2003() . The one to three economic quantum cloning of 
equatorial qubit s encoded by pol arization states of photons and the universal cloning are realized experimentally in 
(IXu et aLl . [2008l) . NMR system (jChen et all l2007t IDu et a/] . I2OO5I ) . In optical parametric amplification of a single 



photon in the high gain-regime, experiment is performed to distribute the photon polarization state to a large num- 
ber of particles which corresponds to the phase-covariant quantum cloning ( Nagali et aLl . [20071 ). The phase-covariant 
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quantum cloning is implemented in nitrogen- vacancy center of diamond by using three energy levels ( Pan et oZI . l201ll) . 
The experimental implem entation of eavesdropping of BB84 states and trine states by optimal cloning is studied in 
(|Bartkiewicz et aZ.I . [20ll ). 

Quantum cloning is generally not concerned with relativity, with re lativistic covariance requi rement, the state- 
dependent cloning of photons and the BB84 states are studied in fjBradler and Jaureguil l2008l ). It is shown by 
pha se-covariant quantum c loning that the cloned quantum states are not macroscopic in the spirit of Schrodinger's 
cat ( Frowis and Diirl . |2012|). Th e cloning network of generalized BB84 states constituted by two pairs of orthogonal 
states is presented in ( Cao and Song. 2003)- The state-dependent clonin g machine and the relation with completely 
positive trace-preserving maps is studi ed in (ICarlini and Sasaki |2003| ). The phenomena of superbroadcasting is 



2006^ . The optimal broadcasting of mixed equatorial qubits 



also studied for phase-covariant case ()Buscemi et at. 

is studied in t Yu . .200 ^ . Quantum circuit s for both entanglement manipulation and asymmetric phase-covariant 



clon ing are studied i n jLevente et aLl . l2010l ). Relation of state-dependent cloning with q uantum t r ackin g is studied 
in (|Mendonca et al The no-cloning theorem for a sing le POVM is presented in (|Rasteginl . |2010|). A hvbrid 

quan tum cloning machine combines universal and state-dependent cases together is presented in ( Adhikari et al\ . 
I2OO7). While equa torial qubit contains only one arbitrary parameter, the phase information cannot be compressed 
lmn£iLaI],[20l3). 
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VI. LOCAL CLONING OF ENTANGLED STATES, ENTANGLEMENT IN QUANTUM CLONING 

Quantum cloning is generally to find the quantum operations to realize the optimal cloning. The only restriction 
is that the operations should satisfy quantum mechanics. We next study the local cloning of entangled states, in 
this case, the op erations are additionally restricted to be local. In principle, there is also a no-cloning theorem for 
entangled states ( Koashi and Imotol . Il998l ). 

In addition, since the crucial role of quantum entanglement in quantum information, we will also study the entan- 
glement properties in quantum cloning machines. 



A. Local cloning of Bell states 

Quantum entanglement plays a key role in quantum computation and quantum information. It is the precious 
resource in quantum information processing. Also entanglement is a unique property of quantum system which does 
not have any classical correspondence. In this sense, quantum entanglement has already become a common concept 
and has many applications in various quantum systems. The study of entanglement is generally under the condition of 
local (quantum) operations and classical communication (LOCC). This is due to the consideration that entanglement 
does not increase under LOCC. 

The local cloning of entangled states is an interesting topic ()Anselmi et al ]. l2004HBuzek" et al. l. ll997bl : [Ghosh" et all 
12004 lo wan and Havashi |2006| ). First let us raise the problem: Suppose two spatially separated parties, Alice (A) 
and Bob (B), share some entangled states, by LOCC, t hey want to copy the shared entangled states. As an example, 
let us study the following problem ( Ghosh et a/.l . |200^ . the four Bell states are defined as usual as the following. 



= -L(|oo) + |ii)), 

1$-) = i=(|00)-|ll)) = (/®Z)|<i>+), 
1*+) = i=(|oi) + |lG)) = (/®X)|<i>+), 

1*-) = i=(|oi)-|lG)). = (/®XZ)|<i>+). (249) 

Alice and Bob share one Bell states from a known subset, say 1$^)}, they want to copy this state by LOCC. 

Several problems should be considered before to study this problem: (l).The entanglement between A and B does 
not increase under LOCC. So to copy locally this state, we generally assume that some known entangled states, for 
example are shared between A and B which can be used as ancilla. (2). The entanglement r e sourc e used by 

local copying should be minimum. Otherwise, we can use the teleportation scheme! Bennett et all Il993[ ). let Bob 



(Alice) obtain the full state {|^+), |$^)}, he knows the state exactly by measurement, and copies of the entangled 
state between A and B can be obtained easily by local unitary operati ons which are showp explicitly above in (12491) . 
Actually Alice and B ob can discriminate any two BeU states by LOCC (|Ghosh et adl200ll:IWalgate and Hardvl . l2002t 
IWalgate et ^ ■ |2000[ ). 

In these conditions, the problem can be explicitly stated as: Alice and Bob share either of two maximally entangled 
states {|*+), 1$+)} and an ancilla |$+), can they obtain the state or \^+)^^ by LOCC? The answer is 'yes': 

both Alice and Bob do CNOT gate with the unknown qubit as the controlled qubit and the ancilla as the target qubit, 
they can achieve their aim. We name this method as CNOT scheme. The key point here is that Alice and Bob do 
not need to know which state they share, they can finally obtain two copies of this state, and only one known state 
l^"*") (resource) is consumed. Let us next analyze the advantages of this scheme. If we use the teleportation, then 
discriminate the state, finally prepare the two copies, we find that three Bell states |$+) (resource) are used. If we use 
the local discrimination, i.e. by local measurement in {|0), |1)} basis and with assistance of classical communication, 
we know the exact form of the shared state, the two copies can be obtained by local unitary operations. In this 
scheme, two Bell sates are consumed. On the other hand, to obtain two copies of l^*^) or 1$^), at least, one ancilla 
should be used. So the CNOT scheme is optimal. 



B. Local cloning and local discrimination 



If a set of quantum states can be perfected discriminated, they can be copied perfectly since we can discriminate 
them first, then prepare many copies of these states by using the available entanglement resource. For example, two 
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orthogonal states can be copied perfectly. We know that two Bell states can be locally discriminated, as shown in the 
last subsection, they can be local cloned perfectly if a priori Bell state resource is avai lable. Is it generally true that 
local discrimination means local cloning being possible? In ( Owari and Havashil l2006l ) . it is stated that, in general, 
the local copying is more difficult than local discrimination. 



However, local cloning and local discrimin ation are closely related ( Owari and Havashil |2006|) . The following result 



was obtained in (jOwari and Havashil 120061 ): For d-dimensional system, and suppose d is prime, a set of maximally 
entangled states {\'^j)}f^Q^ are defined as 

\^,} = {Uj®m+), (250) 

and 

D-l 

C/,- ^c.^-^|fc)(fc|, (251) 
j=o 

then the set {\'^j)}fSQ^ can be locally copied. 

Here l et us p oint out that the states of this set can be local discriminated perfectly according to the criteria proposed 
m (If^ . |2004D . The scheme can be like the following. It is known that Uj = al , where the generalized Pauli matrix 
az\k) = uj'^lk). We define a class generalized Hadamard transformations as, up to an unimportant factor, 

{H^)jk=^-'''uj-''"', (252) 

where Sk = k + ... + {d — 1). We remark that those transformations correspond to the d+ 1 mutually unbiased states. 
By applying those Hadamard transformations, the generalized Pauli matrices transform as, 

Hacr^ a^H^ = (T^ cr^ ■ (253) 

Now we know that cr^ matrix can be transformed to matrix, Uj — >■ cr^. Since (ctJ '8' /) I^^) — '^\k + j,k), 
that means those states can be distinguished by LOCC, also the above transformations correspond to local unitary 
operations, we now conclude that states in set {l^'j)}^^"'^ can be distinguished by LOCC. 
We next see how those states can be cloned locally, define generalized CNOT gate as, 

CNOT ■.\a)\b) ^\a)\b + a), (254) 

where \a + b) modula d is assumed. We suppose an ancilla state l^"*") is shared between Ahce and Bob. Let both 
Alice and Bob perform the generalized CNOT gate, we obtain the perfect copies j^'j)'^^. This result can be derived 
as follows, according the definition of the CNOT gate, we know that 

CNOT^ ■.\a)\b) ~^\a)\b-a), (255) 

It is straightforward to check that we have the following properties 

l$+)l2|$+)34 = CiVOT/g 0C7VOrJj$+)i2|$ + )34 

= CNOTi3(g)CNOT2i\^+)i2\^+)3i. (256) 

Then we can find 

CNOTis ® CiVOT24|*,)i2|$+)34. = CNOTis ^ CNOT^^iU, ® /)i3|$+)i2|$+)34 

= C7iVOTi3(C/,®/)i3CA^Or/3|$+)i2|$+)34. (25 7) 

And we know the following result: 

CNOT{Uj I)CNOT'f = Uj ® Uj. (258) 

The operator Uj is copied. Thus by this method, a set of maximally entangled states {\'^j)}f^Q^ are locally copied. 
This interesting phenomenon means that some unitary operators can be cloned perfec tly in the above fr amework. 

In 2-dimensional system, we have presented relations (|j5|) for CNOT gate previously (jCottesmanl . Il998() , {ax (^I) ^ 
ax® cFx^ (fz ® I) — >■ az ® ® ax) — >■ I ® ax,{I ® az) — >■ az ® az. Those results imply that the bit flip errors are 
copied forwards while the phase errors are copied backwards. But we cannot copy simultaneously the bit flip errors 
and phase flip errors. This is a kind of no-cloning theorem. 
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The local cloning of product states wit hout the shared entang le ment ancilla is studied in (|ji et al. . 20051). Distin- 
guishing states locally is also studied in ( Chen and Yand . boOlal lbl: IWalgate and Hardy . 20o3^Walgate et al . 2000| ). 



The local cloning of othe r cases are also studi ed, including three-qubit case ( Adhikari and Choudhurvl. 2006), the 
continuous-variable case (I Adhikari et all l2008l) . orthogonal entangled states and catalytic cop ying jAnselmi et all 



I2004D . The local cloning of partially entangled pure states in higher dime nsion is studi e d in (iLi and Shenl. I2009D 



Some result s of lo cal cloning virith entanglement resource are presented in ( Chefles et all^OOli ICollins et all . l200ll : 

lEisert et a/.l . l2000t) . 

Various schemes of quantum cloning of entanglement are studied in ( Karpoy et all 2005 : iLamoureux et a/.l . |2004J ). 
Quantum cloning of continuous- variable entangled states is studied in ( Weedbrook et all 200^. T he cloning of 
entangled photons to large scales which might be see by human eye is analyzed in ( Sekatski et all\201(t ). T he scheme 
of cloning unknow n entangled s tate a nd its orthogonal-c omplement state with some assistances is studied in ( Ma et all . 
[20091) and also in (IZhanl . I2005D and (iFang et all I2006D . the case of arbitrary unknown two-qubit entangled state is 
studied in (jNiul . |2009| ). The partial quantum cloning of b ipartite state, i. e., only part of the of the two-particle state 
is cloned, and th e cloning of rnixed states are studied in (|Kazakovll2010l ). Coherent states cloning and local cloning 
are presented in ('Don g et all l2008l ). The disentanglement is to preserve the local properties of an entangled state 
but erase the entangle ment between the subsystems, it is closely related with quantum cloning and the broadcastin g 
( Mor and The cloning machine used as approximate disentangle ment is presented in |Yu et aLl . l2004j ). 

The two-qubit disentanglement and inseparability correlation are presented in ( Zhou and Guol . 12000 ). 



C. Entanglement of quantum cloning 

It is also of interest to know the entanglement structure of states in the quantum cloning machines. Potentially, 
those properties can be used to distinguish quantum from classical since entanglement is considered to be one unique 
property of quantum world. 

There are much progress about the theor y of enta nglement, see ('Horo decki et al. I, I2009D for a nice review. For 
example, Peres-Horodeckis criteria (Horodc cki et all 1996; Peres, 1996b) is simple to detect the entangled state. 
Since the output states of the quantum cloning machines are generally available, we can use various techniques to 
study the entanglement properties of the sole copies, or the whole output state of the cloning machine, or the copies 
with the ancilla r y state s, etc. 

In (|Fan et a/.l . l2001bt) . it is shown that for the 1 — > 2 cloning machines, the two copies of the UQCM are entangled. 



while the two copies for the phase-covariant cloning machine are separable. Further, we can use some measures of 
entanglement to quantify the entanglem ent. The entangl e ment structure or separability of the asymmetric phase- 
covariant quantum cloning is studied in (iRez akhani et al'.. 2005) . The bipartite and tripartite entanglement of the 
output state of cloning are studied in (|Brufi and Macchiavellg i2003i) . 
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VII. TELECLONING 

Quantum telecloning, as its name suggests, combines teleportation and quantum cloning so that quantum states 
are distributed to some more spatially separated parties. In the well-known teleportation scheme in ([Bennett et all 
IT993 ) , quantum information of an unknown d- level system is completely transmitted from a sender Alice to a remote 
receiver Bob by using the resource of a maximally entangled state. It is natural to consider "one-to-many" and 
"many-to-ma ny" comm unication via quantum channels. This is the generalized teleportation scheme discussed in 
{GIuu, 2003; Murao et at. 2000). Of course, it is impossible to transmit qua ntum information with perfect fidelities 
for many copies, because the no-cloning theorem (|Wootters and Zurekl . Il983 ) claims that an unknown quantum state 
can not be cloned perfectly. However, as we already shown, we can try to quantum clone those quantum states 
approximately or probabilistically which are allowed by quantum mechanics. 

As we already presented, there are various quantum cloning machines which create optimal copies. The aim of 
teleclone is to create optimal copies which is the same as that of the cloning machines, in addition, we need to 
create optimal copies remotely by teleportation. Those remote copies themselves may be spatially separated with 
each other. One may imagine that we can use first quantum cloning machines to create optimal copies locally, then 
send those copies to their destination points. The aim of teleclone can indeed be realized by this way. In this point, 
the importance of teleclone is like teleportation. Instead of teleportation, we can surely use flying qubits for states 
transportation. However, teleportation in the one hand provides an alternative method. On the other hand, in case 
the quantum channel is noisy, the flying qubits may experience inevitable decoherence which will induce errors. The 
teleportation scheme can avoid this disadvantage by using the maximally entangled state resource. Even when the 
entanglement resource is not perfect, the non-maximally entangled states can be purified locally to create maximally 
entangled states. Now we are ready to study teleclone which combines together the quantum cloning and the quantum 
teleportation. Still the resource of entanglement is necessary, however, its exact form depends on our specially designed 
scheme. 



Murao et al. study the optimal telecloning of 1 qubit to M qubits by using maximally entangled state (jMurao et all 



19991). Telec l oning which transmites an unknown d-level state to M spatially separated receivers is studied in 
( Murao et al\ . |2000[ ). And the teleclon ing of N qubits to M qubits, M > N, that requires positive valued oper- 
ator measure (POVM) was proposed in ( Diir and Cirad . [20001 ) . These telecloning are also called reversible telecloning 



because there is no loss of quantum information. The 1 — 2 telecloni ng which u ses nonmaximum entanglement (it 
is named irreversible telecloning, i n comparis on), is studied in (Brufi et all [l998a[ ). and the generalized case, 1 — >■ M 
irreve rsible telecloning, is given in (lDiiij . l200lt) . Quantum information can be encod ed by states of continuous variable s 
(CV) (jBraunstein and van Loockl . |2005[ ) . The teleportation of CV is presented in ( van Loock and Braunsteiiil . I2OOOI ). 



The optimal 1 to M t elecloning of CV coherent states u sing a (Af + l)-partite entangled state as a multiuser quantum 
channel is shown in ( van Loock and Braunsteinl . I2OO1I ). This optimal telecloning could be achieved by exploiting 



nonmaximum entanglement between the sender and receivers. So this protocol was regarded as a CV irreversible 
telecloning. A scheme of CV reversible N M + (M — N) telecloning, which distributes information without loss, 
is presented in ( Zhang et all . \206di) . 



A. Teleportation 

Let us review the original teleportation protocol and its generalizatio n, i.e., the many-to-m any scheme for trans- 
mitting quantum information. The teleportation scheme is proposed in ( Bennett et aLl . ll993l ). Alice wants to send 



an unknown state of a d-level particle to a spatially separated observer Bob with the help of quantum channel and 
classical communication. Alice's initial unknown state is. 



|V)=^afe|fc)A, (259) 



fe=0 



where X]fe=o lo^feP — 1 ^^'^ {\^)} ^ complete orthogonal basis. In order to achieve the teleportation, Alice and Bob 
are assumed to share a prior maximally entangled state, |^) = 1$^), 

\0 = -72'E\j)p\j)b- (260) 

j=0 



56 



The total system is, \^) = (E) which can be rewritten as, 

\^) ^\^JJ)^(g,\^)pg = - |$,^„)^p^exp(^-i— ^jafc|/c + m)B, (261) 

m,n— k—Q 

where A: + m is assumed to module d. As standard, the generalized Bell basis are, 

1 2TTnk 

|$„„,) = _ Vcxp(i^^)|/c)|fc + m). (262) 

Alice performs a joint Bell-type measurement on the input and port particles, sends the measurement result to, n 
to receiver Bob via classical communication. The unitary transformation which brings Bob's particle to the original 
state of Alice's is 



2n jn 

Umn = exp{i-^^^ + to|. (263) 



As we already know, they are the generalized Pauli matrices in d dimension. 

Next, we will review the generalized symmetric teleportation scheme of N senders and M,{M > N), receivers 
proposed in (|Ghiul . [20031) . Assuming the senders Xi,X2, - ■ ■ share an unknown, but with fixed form of entangled 

state \'4')x = '^k=o'^k\fpk)xi\'4'k)x2 ■ • • \4'k)xN, where {IV'fe)} is an orthonormal basis of d-dimensional space. The 
quantum entangled state, consisting of N "port" particles Pk{k — 1, • • • ,N) and M receivers Ck{k = 1, ■ ■ ■ , M), takes 
a special form which is a {N + M)-partite state, 

10 = -^y] ki)Pikj>P2 •••kj)Pivl'/'j)ciC2-CM, (264) 
where {Ittj}} denotes a d-dimensional orthonormal basis. The complete state of the system is. 



IV') 10 = -n lV'fc)xi|7rj)pjV'fc)x2kj)p2---|V'/c)x«kj)p„|0j)ciC2-CM 

1 ... . , r 27rk 



I^'m,ni)|$m,n2) • • • '8) y^exp - i—r- {ui + n2 -\ h njv) CKfe | V'/c-(-m) (265) 



d(A'+l)/2 

m,ni ,112 k 

The following steps are involved in this protocol: 

1. The senders performed a joint Bell- type measurement on particles Xj and Pj and get the outcomes, 

|$m,„i),|«'m,„2)r-- ,l*m,ni), 

2. The outcomes were sent to the receivers by using classical communication, 

3. Then, the receivers performe a local recovery unitary operator(LRUO) that satisfies /7m;ni, n2. I0fe+m) = 



exp 



Several remarks are here: (i). In case that local operations are allowed, state \ip)x can be transformed locally to 
just one qudit, X]fc=o Q^felV'fc)- (ii)- The M receivers are located in spatially separated places, otherwise if they are 
in the same port, local quantum operations can reversely change the qudit X]fe=o '^fclV'fc) to a generalized GHZ like 
state shared by M parties, (iii). The scheme presented above combines the quantum information distribution and 
the teleportation together. 



B. Symmetric 1 M telecloning 

In this subsection, we study the 1 — ?> M generalized telecloning of qudit which is studied in ( Murao et a/.l . [2000[ ) . In 
that scenario, the quantum information of d-level particle is transmitted optimally from one sender X to M receivers 
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C*!, (^2, • • ■ , Cm- One "port" and (M — 1) ancillary particles were involved. The resource, including the port particle 
and {2M — 1) output states (M receivers and {M — 1) ancillas), is the maximally entangled state, 

^ d[M]-l 



-, d-1 rr d[M]-l 

d-1 

--=^|j)p0|0,), (266) 

where, d[M] = C^^^_-^, we denote the normalized symmetric state as, |^^) = ^===|P(ao, oi, • • • ,aA/_i)), (P 
denotes the sum of all possible permutation of the elements {ao, ai, •• • .aA/-i}foraj G {0, 1, • • • , d— 1} and Oj+i >&_,), 
{|<^^) = -^=^5^1*^1-1 p{j\£,^^)pA\£,k)c} is a basis of the output state. The LRUO that satisfies C/„i„|0j+,„) = 

e'^^|(/)j) for the output state is 

Umn ^U^,,® ■ ■ ■ ®U^,,®UZ^® ■ ■ ■ ® t/^„, (267) 

" V ' " V ' 

M-1 M 

where 

d-l d-l 

The initial state \^)x = X]^=o '^ib) sender X is "encoded" to the separated output state \4>)x = Sj=o '^j\4>j) 

held by the (M-1) ancillas and M receivers. 



where k' = /a/ (oq, • • • , Oj-i, ij, • • • , om-i)- There is a relationship between index k and k': k = g{aj, fc'), then the 
total system takes the form, 

d[M-l]-l 

1'^.) = ^ E <ier^>^«l^.l.'))C' (270) 



where we use the notation, i?*^ = X By tracing out the ancillary states A, we obtain the output state of 

M qudits, 

ci[M- 1]-1 

^ d-l d[M-l]-l 

^ J ij'=0 fc'=0 

d[A/]-l d[A/]-l 

A? — Ai' — 

- '^'^^ SAf(|^)(V'l®I^^'''"'^)sA/-T(|V')(^l) (271) 



d[M] 



This reduced density matrix of th e receivers is consistent with the density matrix for 1 — >■ M d-level optimal clones 
(|Wang et al\ . \2011\i\Wen^ \ 19981) . Let us emphasize that the output of M qudits are consistent with optimal cloning, 
moreover, they are spatially separated in different places. T he 1 M telecloning is also related with programming 
protocol which is studied in ( Ishizaka and Hiroshimal . |2008^ . 
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C. Economical phase-covariant telecloning 

Quant um cloning; machines h ave economic and non-economic cases. Similarly, we also have the economic tele- 
cloning (IWang and Yang. '2009a''^ . We know tha t phase-covariant cloning has been studied in (|Brufi et al. I. I2000at 
iD'Ariano and Macchiavello 2003: Fan et a/J . 12005. ,200 lb). The 1 — > M optimal economical phase-covariant cloning 
for qubits was pro posed in (lYu et a/.l . l2007L and the 1 — >■ 2 economic map (non-optimal) for qudits also was studied 



( Durt et a l.. '2005*). For special value M = kd + N , the optimal N ^ M economical cloning for qudits has been 
introduced (Busccmi et al., 2 00^. A p r otocol for the 1 — > Af economical phase-covariant telecloning of qubits has 
be en demonstrated i n dWang and Yangl l2009al ). and the 1 — 2 economical phase cloning of qudits has been derived 



(IWang and Ym5 l2009bD . 



We next see the 1 — >• M economical phase cloning of qubits, the input state is, \tp)x — cos ||0)x -I- e*"^ sin 



C/|0)i|i?2...M> = I'^o) - |00---0)a/ 

_c/|i)i|i?2...M> = |0i> = ^ E-Li |o • • • 1, . . . 0) 



We get the output state which is |?/')m* = cos||^o)x + e*"^ sin and fidelity F ~ ^{■ip\tr{\tp)out{'>P\)\'>P) x = 

jj sin^ I -I- cos'' I + sin^ | cos^ | (^^^ + ^^m^ ^ ■ Second, the telecloning scheme is that the sender X prepares the 
quantum information channel \£,)pc = -^(|O)p|0o)c + |1)p|0i)c)- The total state can be expressed as 

mxpc = \^)x\(,)pc = \[\^°)xp ® (cos^|(/.o) +e** sin ^ I </.!)) + |<i>i)^p ® (cos ^|0o) - sin 

+ |$')xp ® (e** sin ^|</.o) + cos + |$3)^p ^ (e'0 ^iJ-\^o) ~ cos , (272) 

where {|$°) = l^""*"), |$^) = |$~), |$^) = |*^), \^^) = |*^)} are the Bell basis. The next steps have been reviewed 
above in the generalized telecloning. 

For the input state \ip)x = 5I]^=o \3)x, the 1 — >■ 2 economical phase-covariant cloning machine was demon- 
strated in ( Durt et a/.l . l2005l ) . It takes the form. 



{u\Q)x\R) = \M = m 

\U\j)x\R) - \h) - TfdjO) + |0j)), (j ^ 0) 



(273) 



The fidelity is Fecon = x{'^\^'ri\'^)out{'ip\)\^)x = ^[{d - if + (1 + 2^/2){d - 1) + 2]. However, the optimal fidelity 
of 1 — > 2 phase-covariant (with an ancilla) presented in (jFan et al\ . |2003|) is, Fopt — 3^('^ + 2 + Vd^ + 4(i — 4). 
When d — 2, Fecon = Fopt and otherwise d > 2, Fecon < Fopt- It is possible to achieve with optimal fidelity Fopt 
probabilistically ( Wang and Yanel . l2009bl ). In this scheme, the entangled state used is \£,)pc — J2'jZo ^j\j)p\4'j)c, 

where the coefficients xj, that are assumed to be real numbers, satisfy the normalization condition X]^=o ^'j ^ 
quantum state of the whole system is, 

\^)xpc = \i')x <E)\Opc = |$„„)jfP^exp(i^^)xj-+„e'''^|0j-+„)c (274) 

m.n—O j—0 

Only when the outcome of the Bell-type joint measurement is {m = 0, n}( with probability 1/d), the receivers 
can obtain the clones |V')out = J2jZo ^j^^^^l'Pj) by using the LRUO U — Uon <E> I- The fidelity of this clones is 

Pecon = l(^ + y^^O + J2tZl T,1ZLl X^Xj) . Wc SCt {xj} aS 




D{D + d - 2){d - 1)'' 



U ^ 0), (275) 



where D = + 4d — 4. It's not difficult to verify that F^^on = ^opt for any d. Actually, the output state of this 



telecloning scheme is equivalent to the Popt of the optimal phase-covariant cloning after tracing out of the ancilla 
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(|Fan et al\ . I2003D . For d > 2, the von Neumann entropy S{\0{^\) = -X'^{d) log^ X'^{d) - {d - l)Y'^{d) logs < 
logs which implies |^) is only partially entangled. Thus, we can conclude that the suitable quantum entanglement in 
realizing the optimal 1 — )■ 2 cloning of qudits with a certain probability 1 /d are special configurations of nonmaximally 
entangled states rather than the maximally entangled states. 



D. Asymmetric telecloning 



Quantum telecloning described in the previous section evenly distributes information of the unknown input state to 
the distant receivers. However, it may be desirable to transmit information to several different receivers with different 
fidelities. For example, the sender Alice trusts Bob more than Claire hope Bob's fidelity is larger. Thes e schemes are 
asymmetric telecloning. The 1 to 2 optimal asymmetric quantum cloning of qubits was introduced in ( Buzek et all 
IT998. : ,Ceri ,1998. 2000bl: Niu and Griffithsi. Ll998i). The 1 to 2 asymmet ric cloning inachine was generalized to d- 
dimension case in ( Braunstein et al. , 2001bl : ICerj . l2000al) , and rece ntlv in (IWang et al ]. l2011bD . 

Here, we briefiy review 1 — )■ 2 asymmetric telecloning for qubits ( Murao et al\ . \20(M) as an example. The entangle- 
ment state resource is, |^) — --i=(|O)p|0Q) + |l)p|(/)i), where 



\M = 
I0i) 



1 



= (|0)|0)b|0)c+p|1)|0)b1)c + <7|1)|1)s|0)c) 

= (|1)|1)b|1)c +P|0)|l)s0)c + <7|0)|0)b|1)c) [p- 



1) 



(276) 



The LRUOs satisfy the conditions, cr^ (gjcr^ (g) (T2|0o(i)) — i~)\(f>o(i)) , ctx ^ (^x ^ crx\4'o{i)) = \4>i{o})- And the final output 
state is \ip)out — aol'/'o) + ai|0i) while the input state being \'iIj)x = ao|0) + The fidelities of Bob and Claire, 

which satisfy the trade-off relation, ^(1 — Fb){1 — Fc) — Fb + Fc ~ respectively are 



Fb = 



Fc = 



1 



Next, we show the results of 1 to 2 asymmetric telecloning of qudits. The asymmetric cloning machine is 

U\J)c^mc,A = - l^mAym,n\j)c^) ® |$m. -n)c2A 



m,n— 



d-1 



= ^ bm,r\j + m)ci \j + r)c2 \j + m + r)A, 



(277) 



(278) 



(279) 



where Vm,n — J2^=q e'^^^^^'^\j + m){j\ are generahzed Paufi matrices and b„i^r = Sn=o ^ '^'^"'^^'^/^m.n- We have 



mathematical equation. 



m,n— 

where E1~;1=o = 1' 7. 



f3m,n\^m,n)RCi\^m,-n)c2A — ^ 7m,n|^m,n 

m,n— 



^7n,n)RC2\^m,-n)ciA 



(280) 



l^x v^o^^"^^^^^ Then we project this equation on and get 



l<^j) = Z]l.^=o7m,n(Kn,nb')c2) ® \'^m,~n}ciA- The input statc = Z]Lo IS copicd into the output states 



j\^])ciC2A- This output states are described by the reduced density matrices, respectively, 

PC,=trc2AmoutW)^ J2 l/5m,n|'K^,„|^)x(^|Ki,„, (281) 

m,n— 

d-1 

PC2^trc,Amout{^\)^ |7m,n|V™,„|V)x(^K„. (282) 

m,n— 

In order to generate the clones that are charact erized by the optimal fidelities which are independent of the input 
state, the following condition should be satisfied (ICeri l2000al: ICerf et all l2002bD . 



^0,0 



1 

bo,r 



[v+{d-l)fi], b,nM 

1 



Vd 



(j^-m), 



0, (m ^ 0, r ^ 0) 



(283) 
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And we get the fidehties of two clones 

l + (rf-l)(p2+g2)' C2 l + (d_l)(p2+q2)' 

where p = ^^^^^-^^^ , g = 1 — p. When p = q = 1/2, the fidelities are in agreement with F = ^'^^^T^jif^y^ — 
1,M = 2) obtained by Werner ( Werneil . Il998f) . The telecloning scheme requires the quantum entanglement, shared 
by the port, ancilla, and the receivers Ci,C2, is given as |^) = ^ J2'jZo \j)p\'^j)ciC2A- After the sender performs a 
Bell-type joint measurement on the input and port particles, and gets the result m, n, the ancilla and the receivers 
Ci, C2 perform the LRUO C/^^"' = j,j3 e^2-0i+j2-j3)/rf|j-^) (^-^ + ^ + ^|^^ ^ |^3)(^3 + and gets 

the output state |'(/')o«t = Z]j=o "il'/'i)ciC2vi- 



E. General telecloning 

In the general case ( Zhang et al\ . |2013() . the sender hold the identical input states at the same location as 



X — T^^[^/n'\Y\- = yit\~^)- The sender would like to distribute these states to spatially separated 



M receivers, M > N. Following the teleportation procedure, the sender performs a joint measurement on input 
particles Xi, X2, • • • , Xjsf and port particles Pi, P2, • ■ ■ , Pn which are acting as ancillary states, then announce the 
outcome to the M — N ancillas and M receivers via classical communication. Next, the ancillas and receivers get the 
optimal clones after applying the specific Local Recovery Unitary Operator (LRUO). In order to achieve this aim, 
instead of using joint Bell-type measurement, the sender performs a more general positive operator-valued measure 
(POVM) on the system, 

1 ^ 

Ix(l^)) = [ir ® C/(l^)r]-==^|^)x|^)p, (285) 
J d^F^ = J dl^X{l^)\x{'^)){x{l^)\ ^S^<E>S^ (286) 

where 5^ S'^ is the identity in the space ® , Uil^) is an element of Lie group SU{d), and the vector 

~^ consisting (d^ ~ 1) parameters which can determine the unitar y op e rator . Next we show that the latter equation 
can be satisfied. According to the theorem of Weyl Reciprocity (jMal . l2007l ). the unitary transformation U'^^ and 
permutation permutation can be exchanged. If y]f' is a standard Young operator corresponding to the standard 
Young tableau with N boxes, the subspace y]f''H®^ will be invariant under transformation C/**^. Considering that 
the symmetric projection is equal to the standard Young operator -^3^'^', we have 

jj{j^)^NgN ^ s^'Ui^f, (287) 
[/(l^)«^|^^t) = (288) 

where D{J^) is a representation of Lie group SU{d). A group theorem states that an irreducible representation of 

group SU{d) will be indu ced when U(l^)®'^ operates on invariant subspace y\^'^'H®^ when y]^'^ is a standard Young 
operator, see (iMal . I20d7i) . Thus D{1^) i s an irred ucible representation of group SU{d). Then according to Schur's 
lemmas and the orthogonality relations (jMal . l2007t ) , we obtain, 

^ j d^A(-^)i^^,jj.(l^^)7?^_^(^) = <5st,s3<5sj,f^ (289) 

This formula ensures that the integral of the projectors F-^ is equal to the identity operator in the space Ti!^^ <Si 
which should be satisfied for a POVM. In special case d = 2, because we know the analytical expression of the unitary 
matrix t/(l?) and its irreducible representation D(^), an appropriate finite POVM can be constructed, then the 
integral reduces to summation. The importance to construct finite POVM is that its explicit form is necessary for 
experimental implementation. 
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FIG. 6 Scheme of telecloning. The sender who may possess several ports share a maximaUy entangled state with several 
receivers who are spatially separated, and possibly assisted with ancillary states. T he sender (C l oud) performs a POVM and 
announces the measurement result, the receiver can recover their states locally, see l|Zhang et fflZ.l[2013 ') 



The total system can be expressed as 



PAC 



d[N] 

K-i)\x{-^))xp[U'°"^\l^)]^^c)Ac 



(290) 



The LRUO is U^°'"'\'^) = U'^{'^)f^~^^ ® U^(^)$^. As we expect, the sender distributes the universal cloning 
state \tpc)AC to spatially separated M receivers assisted by {M — N) ancillas. The scheme of the telecloning can be 
represented in FIG HI 

The asy mmetric quantum telecl oning for multiqubit states with various figures of merit are investigated by Chen 
and Chen (IChen and Chenl . l2007a^ . The reverse processing of telecloning is the remote state concentration. Roughly 
speaking, The final state of the information concentration is the initial state of the telecloning. It is shown th at in 
the concentration processing, the bound entangled state can be used as a resource (|Murao and Vedrall . [200l . On 
the other han d, the standa. r d ent angled state can also be used with similar capability in the quantum information 



concen tration ( Zhang et all 120131 ). This remote quantum information concentration is also studi ed in (IWang et al\ . 
l2011al ). The experimental realization of telecloning is performed by partial teleportation scheme ( Zhao et all 20051) . 



A proposal of distance cloning is in ( .Film. 2004b) . The entanglement resource of up to six qubits of Dicke states is 
created experimentally ( Prevedel et all . l2009i) . The experimental implementation of telecloning of optical coherent 

The experimental te lecloning of phase-conjuga te inputs is presented 



states is demonstrated in ( Koike et 



in ( Zhang et all |20()8|) . Telecloning o f entanglement is presented in ( Ghiu and Karlssoni l2005l) . the telecloning of W 
state is studied in ( Yan et "oZI . |2009|). A scheme to im plement an economical phase-covariant quantum telecloning 



is separate cavities is proposed in (jFang et all l2012bf). Implemen tation of telecloning of economic phase-covariant 



about bipartite entangled state is studied in (iMeng and Zhul . l2009l ) . The continuous variable telecloning with bright 



qubit is studied in ( Zhan et all 



entangled beams is studied in ( Olivares and Parisl " 20081 ) . The controlled telecloning and teleflipping for one pure 



20091) ■ 
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VIII. QUANTUM CLONING FOR CONTINUOUS VARIABLE SYSTEMS 

This section is devoted to the issue of qu antum cloning machine (Q CM) for continuous variable systems. The avail- 
able reviews are ( IScarani et all 12005 ^ and (" Cerf and Grangi"eil . l200lt) . An example of continuous systems is simply to 
consider the position and momentum of a particle, or the two quadratures of a quantized electromagnetic field. Instead 
of universal cloning, we only study the case oi N ^ M Gaussian cloning for coherent states, whose precise definition 
will be given in the context later. We shall first get the fidelity bound for iV — > M Gaussian cloning (Cerf and IblisdiiJ, 
and then give an explicit implementation using a linear amplifier and beam splitters (Braunstcin et al., 2001a). 
Note that the same procedu re is also suitable if the input states are squeezed states, provided little change of param- 
eters of the devices is made( Braunstein et all . l2001at ICerf and Iblisdiii |2000() . 



A. Optimal bounds for Gaussian doners of coherent states 

We deal with a quantum system described in terms of two canonically conjugated operators x and p, which respec- 
tively has a continuous spectra. Since x and p are conjugated, they cannot both be copied perfectly, so we hope to find 
a cloning machine which makes an approximately cloning and get an "optimal" result. Corresponding to universal 
cloning, we here focus on cloning transformations which take only coherent states as input, that is, the input states 
of the cloning machine form a set 5, which can be parametrized as, 

S = \\a) : a ^ -^{x + ip),x,p e r\ , (291) 



V2' 

where (a|£|a) — x and (a|p|a) = p. Moreover we shall only consider N ^ M symmetric Gaussian cloners(SGCs) 
which can be defined as a linear completely positive map:CAr_M : T-C^^ H***^, where T-L stands for an infinite- 
dimensional Hilbert space. So after the transformation we shall get pM = Cjv_Af (|q;) (a|^^). To mean Gaussian, the 
reduced state of a single clone needs to satisfy: 

Pi = TrM-iipKi) 

= — /d2^e-l'3|'/<«i:'(/3)|^')(*|L'^(/3), (292) 

where the integral is performed over all values of /? = (x + ip)/^/2 in the complex plane, note that we have set h—1, 
and D{I3) = exp{l3a) - P* a) is a displacement operator which shifts a state of x in position and p in momentum, 
a and denote annihilation and creation operators respectively. As a result, after cloning for each copy an extra 
noise cr^ = Cp = cr^ a/ o^. the conjugate variables x and p are added. It is readily checked that the cloning fidelity 
Jn.m — (cklpilck) is the same for any coherent input state \a), provided <jn.m remains invariant, which means, our 
doner is symmetric. Through simple computation one finds, 

/jv.M = {a\pi\a) = -. ,^2 • (293) 

Now we shall make the proposition that the lower bound of (7jv,m is 

M~N , , 

~<M = -J^, (294) 

which implies the optimal fidelity for N — > M cloning machine is 

f - 1 _ MN 
f^'^^ - " MN + M-N- 

Next we will prove (|294p . As first step we shall come up with a lemma. 

Lemma 1. Cascading a. N ^ M doner with an Af i doner cannot be better than the optimal N L doner. 
In our case, two cascading N ^ M and M ^ L SGCs result in a single N ^ L SGC whose variance is simply the 
sum of variances of the two cascading SGCs. Hence we have 

^N,L < O'A'.A/ + C^M.i! (296) 

where ct^ stands for the low variance bound of — > i doner. 
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The proof for Lemma 1 can be found in ( Cerf and IbhsdiJ . l2000l) . We will use lemma 1 to reach (|294l) . From (|296l) . 
setting L — T' CXI we get 



-^2 



Then we can use quantum estimation theory to analyze afj which is the variance of an optimal joint measurement 
of X and p on N replicas of a system. We have ()Holevol . Il982[ ). 

g^alil) + gpa^il) > g^Ax' + gpAf + ^5^, (298) 

for all values of the constants gx,gp > 0, where <t^(1) and (Jp{l) denote the variance of the measured values of x and 
p, while Ai^ and Ap^ denote the intrinsic variance of observables x and p, respectively. For each value of gx and gp, 
we have a specifi c posit ive-operator- valued measure(POVM) which achieves the bound. Also, as in classical statistics, 
we have (|Holevd . Il982| ) , 

<jliN) = ^,al{N)^^, (299) 

where cr'^N or cr^N is the measured variance of i or p if we perform the measurement on N independent and identical 
systems. In the context of coherent states, Aa:^ = Ap^ — 1/2, if we further require (tI{N) = ap{N), the tight bound 
of (|298l) is reached for g^ = gp- Then it yields from (I298P 

4,oo = 1/^- (300) 
Combine pOOp and (|296p . we have completed our proof. 



B. Implementation of optimal Gaussian QCM with a linear amplifier and beam splitters 

In this section, we shall give the explicit transformation for the optimal Gaussian iV — >■ M cloning of coherent 
states, and show that the transformation can be implemented through the com mon devices used in quan tum optics 
experiments: a phase-insensitive linear amplifier and a network of beam splitters! Braunstein et aI1 . l2001al ). Thus we 



can prove that the optimal bounds of fidelity derived in the previous section can actually be achieved. Note also other 
implementations may be possible as well, for ex ample, a scheme using a circuit of CNOT gates is proposed to be an 
implementation for the 1 — 2 Gaussian cloningl Cerf et a7] . l2000l ). 



Assume the state to be cloned is |a), we denote the initial input state of the cloning machine as j^*) ~ \a)'^^ (g) 
|Q^(8iM-Ar ^ \0)^^ where except the N input modes to be cloned, we have M — N blank modes and an ancillary mode 
z. The blank modes and the ancilla are prepared initially in the vacuum state |0). Let {xk,Pk} denote the pair of 
quadrature operators associated with each mode k involved in the cloning transformation, where k = 0, M — l(for 
simplicity, we sometimes omit the hats for operators when the context is unambiguous). As usual, for cloning we 
mean a quantum operation U : — >. ^f^M-i performed on the initial state |\E'), and the output state becomes 

For simplicity of analysis and calculation which shall be shown below, we work in the Heisenberg picture, then U 
can be described by a canonical transformation acting on the operators {xk,Pk}'- 

xl = U^XkU, pI = U^pkU, (301) 

while the state |^) is left invariant. We will now impose several requirements for the transformation U which establish 
some expected properties of the state after cloning: 

1. The expected values of x and k for the M output modes be: 

i^k) = (a|a;o|a), {Pk) = (abo|a), (302) 
which means the state of the clones is centered on the original coherent state. 

2. Note that for a coherent state, we have = = Axf,^^^ = i, and also by a rotation in the phase space, we get 
the operator v = cx + dp, (where c and d are complex numbers satisfying |cp -f |c?p — 1), the error variance of 
which is the same: 



(303) 
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FIG. 7 Implementation of the optimal Gaussian 1 — » 2 QCM for light modes. LA stands for linear amplifier and BS represents 
a balanced beam splitter, see (jBraunstein et aHl2001al '). 

We then require that the invariance property under rotation is preserved by the transformation U , which yields 

2 2 



a^„ = a^„ = a"-,, = (1 + — - — )Ax: 



■"k Pk 



N M' 



(304) 



where v^. — cxj. + dpf. . 



3. U is unitary, which in the Heisenberg picture is equivalent to demand that the commutation relations are 
preserved through the transformation: 



= [p'',p'k] = 0, {x'',pI] = iSjk: 



(305) 



for j, k = 0, M — 1 and for the ancilla. 
Based on the above requirements we shall then give the explicit implementation of the cloning machine. 



C. Optimal 1^2 Gaussian QCM 

We first consider the simple case of duplication {N — 1, M — 2). An explicit transformation can be found: 

" Xi Xz " Pl Pz 

" Xi Xz " Pl Pz 



X^ ^ Xo + V2Xz , Pz = 



-Po 



V2pz, 



(306) 



for which one can check that all the three requirements are satisfied. 

Next we proceed to see how to implement the above duplicator in practice. First interpret p06p as a sequence of 
two canonical transformations: 



a, 







V2ao + al, a — al, + \f2a. 



(307) 



where flfe = (a;fc +jp,t)/'\/2 and aj^. = (x^ — ipfc)/-\/2 denote the annihilation and creation operators for mode k. We then 
can immediately come up with a practical scheme which has two steps to have the desired transformation realized. 
Step 1 is a phase-insensitive amplifier whose gain G is equal to 2 , while step 2 is a phase-free 50:50 beam splitter(see 
Fig. [T]). To see the doner is optimal, we note from ( Caved . [19821 ) . for an amplifier of gain G, each quadrature's excess 
noise variance is bounded by 



aL>(G-l)/2. 



(308) 



Since we have chosen G to be 2, it yields cr|^^ = 1/2, which proves the optimality of the cloning transformation. 
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FIG. 8 Implementation of the opti mal Gaussian N —¥ M Q CM for light modes. LA represents linear amplifier, DFT stands 
for discrete Fourier transform, see (jBraunstein et a]ll2001al ). 



D. Optimal Gaussian M QCM 

Now we continue to study the case of iV — >■ Af Gaussian cloning, this time we shall again use linear amplifier to 
achieve the transformation. Due to the relation of extra variance and gain from p08|) . we need to make G as low as 
possible in order to reach the optimal limit of ct^ j^j. The cloning procedure is as follows: (i) concentrate the N input 
modes to one single mode, which is then amplified, (ii) distribute the concentrated mode symmetrically among the 
M output modes. Obviously an easy method to realize the processes is through discrete Fourier transform (DFT), 
with which we can write out the detailed steps of the cloning procedure. Step 1: concentration of the N input modes 
by a DFT: 



N-l 



a I. 



j= exp{ikl2TT/N)ai, 



(309) 



where k — 0, N — 1. After the concentration, the energy of the N input modes is put together on one single mode, 
which we shall rename as oq, while every other mode become a vacuum state. Step 2: take the mode oq together with 
the ancilla as the input of a linear amplifier of gain G = M/N, which results. 



(310) 



Step 3: distribute energy symmetrically onto the M outputs by performing a DFT on and the M — 1 vaccum 
modes produced in step 1: 




M-l 



}= ^ exp{ikl2n/M)ai, 



(311) 



1=0 



It's readily checked that the procedure can meet our three requirements. Moreover if we choose (t|^^ = [M/N — l]/2, 
the optimality is then confirmed. 

Like the case of 1 — ^ 2 cloning, we shall also use a network of beam splitters to construct the required DFT. It is 
shown t hat any discrete unitary operator can be experimentall y realized by a sequence of beam splitters and phase 
shiftersl Reck et al\ . \l994) . An explicit construction is given in ( Braunstein et a/.l . l2001a[ l. 



E. Other developments and related topics 

Experimental im plementation of Gaussi an cloning of coherent states with fid elity of about 65% b y only linear 
optics is shown in ( Andersen et all l2005l) . the results are further analyzed in ( Olivares et all . |2Q06| ). Similar as 
in discrete space case, if w e know partial information of the input state in CV system, the fidelity can also be 
improved ( Alexanianl . 2006). Without analog in discrete case, the quantum cloning with phase-conjugate input 
modes is studied in (|Gerf and Iblisdiil . l2001bf) . By some figure of merit, the optim al cloning of coherent states 



with non-Gaussian setting may be better than a Gaussian setting ( Cerf et 'all . l2005l ). However, CV cryptography 
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( Grosshans and Grangieii |2002| ) is still secure under non-Gaussian attack ( Grosshans and Cerj. 200^ . The asymme- 



try CV cloning used for s ecurity analysis o f crypto graphy is also discussed in ()Cerf et al\ . l2002cl ). The CV universal 
NOT gate is studied in (ICerf and Ibhsdid . [200l3)- The application of CV cloning machine in key distribution is 



stu died in (ICerf et all 2 00 ll) . The qu antum cloning limits for finite dist ributions of coherent states are studied 
in ( Cochrane et all 2004), and also in (iDemkowicz-Dobrzanski et all 2004 ). The CV qu antum cloning via various 
schemes ar e proposed in feraunstein et all 2001at D'Ariano et ai . 200lt FiurasekL 12001 bl ). The multicopy Gaussian 
states is in (iFiurasek and Cerf. ' 20071 ). The Gaussian cloning of coherent light states into an atomic quantum memory is 



prese nted in ([Fiurasck et al. , 20041) . The optimal cloning of mixed Gaussian states is stu died in ( Guta and Matsumot 
I2006D . The superbroadcasting of CV mixed states is studied in (jD'Ariano et all l2006l) . A proposal to test quantum 
limits of a Gaussian-distributed set of coherent st ate related w ith cloning is presented in ( Namiki l201l[ ). The cloning 
of CV entangled state is studi ed in ( Wccdbroo k et all l2008l) . Ex perimental realiza t ion o f CV cloning with phase- 
conjugate inp uts is shown in (Sabuiicu et all l2007l) and also in ( Chen and Zhand . l2007t ). The CV teleportation 



is studied in (iBraunstein etpl. , 2000l ). The experimental realization of both CV telepor tation and cloning is re- 



porte d in (jZhang et aLl . 120051 ) . The criteria of CV cloning and t eleportation are studied in ( Grosshans and Grangiei . 
2001). The reviews of C V quantum information can be found in ( Braunstein and van Lo o ck'. '2005: 'Wa ng et oiJ . 120071: 
Weedbrook et al. I. I2012D . the review of CV cloning and QKD can be found in (jCerf and Grangiert i2007f . 
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IX. MEAN KING PROBLEM AS A QUANTUM KEY DISTRIBUTION PROTOCOL 

In this section, we will study a quantum retrodiction scheme used for quantum key distribution. The results 
presented in this section are new. 

A. Introduction of mean king problem 

Quantum key distribution (QKD) protocols allow two parties, called Alice (the sender) and Bob (the receiver) con- 
ventionally, to generate shared secret keys for them to communicate securely. In BB84 protocol! Bennett and BrassardL 



[1984), we send states by exploiting two mutually unbiase d bases of qu bit. Ekert proposed a QKD protocol based on 
Bell theorem by using the entangled pairs in 1991 (E91) (Ekert, 1991^. As we already know that the BB84 protocol 
can also be generalized by using a six-state protocol (Brufi, 1998 ) . 

In this Section, we will study a QKD protocol whic h is essentially a combi nation of BB84 protocol and E91 protocol. 



and it is based on the so-calle d mean king problem ( Vaidman et a/.l . Il987| ) since its description is usually like a tale 
(|Englert and Aharonovll200l[ ). 



The protocol of mean king problem, which will be presented later in detail, can be considered as two steps: The first 
step is the same as E91 protocol except without classical announcement of measurement bases and the second step is 
like BB84 protocol. In this protocol. Bob nee ds to retrodict the out come of a projective measure ment by Alice without 
knowing the bases s he used. For qubit first ( Vaidman et aLl . [l987l ) and higher dimension latter ( Havashi et aLl . [20051 : 



iKimura et at it is shown that Bob has a 100% winning st rategy. So i t is realized that this quantum retrodictio n 

protocol might be applied as a QKD in quantum cryptography ( Bubl . [2OO1I : IWerner et al. L 120091: lYoshida" et al. L l2010D . 

However, one problem is that this QKD is shown to be secure only in transmission-error free scenario, it is not clear in 
other situations. As is well-known, the error caused by decoherence is inevitable in real physical system, in particular 
for entangled states which are necessary in this protocol. Another problem is that, compared with existing QKD 
protocols, it is not clear whether this quantum retrodiction protocol is more secure or not, or in general what is the 
advantage of it. 

In this section, we study the QKD based on the retrodiction protocol by considering the attacks on both steps of 
the entangled pair preparation and quantum state transmission. We find that, like BB84 and E91 protocols, this 
QKD protocol is secure when the error is below a threshold. In particular, it is more secure than these two QKD 
protocols, this conclusion is deduced by two different methods. We remark that our result is for general d-dimensional 
system, and d is prime if the mutually unbiased bases are used. 

Before proceed, let us see the original mean king problem. Once upon a time, Alice imposed a deadly challenge 
for Bob. Initially she owned a qubit, or a spin ^ particle. Then she may measure its angular momentum in x,y 
or z direction. These choices correspond to these three orthonormal basis: {(|0) -I- |l))/-\/2, (|0) — |l))/-\/2}, {(|0) -I- 
i\l))/y/2, (|0) — i\l))/y/2}, {|0), |1)}. And she kept the result as a secret. After sending the final eigenstate to Bob, 
she called up Bob and announced the basis she used. Then, Bob was forced to spell out her measurement result 
immediately, or he was going to be killed. 

There exists a miraculous solution giving Bob 100% chance of success. Bob needs to prepare a maximally entangled 
state between Alice and him in the beginning, (|00) -I- |ll))/-\/2. Then, after Alice have made the measurement and 
sent the state back to him, he measures these two particles in a very special basis: 



\im = 
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^1 


^101 


eT" + |10)e" 


^) 
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^100) - 


^1 


^101 


ct" + |10)e" 


^) 


\m) = 




^1 


^101 


e^T" + |io)e 


^) 


l^(3» = 




^1 


^101 


e^T" + |10)e 


*) 



(312) 

Then, using the following table, he co uld ascertain A l ice's r esult with the basis information. 

This fascinating game comes from ( Vaidman et a/.l . Il987[ ). even before its nam e "M e an Ki ng" was invented. Then 



people realized this game can be used as a quantum key distribution protocol! Bubl l200ll ). Just imagine Alice is 



not malicious. In fact, she and Bob can use this process as a way to check the safety of this quantum channel. In 
ideal (noiseless) cases, if there exists an eavesdropper Eve who tries to extract information from this channel, she will 
inevitably disturb the system and as a consequence, Alice and Bob will find discrepancy in the measurement results. 
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basis used: x y z 

~m ^ ^ io> 

1(1) ^ ^ |o> 

1(2) M) M_|l) ID 
1(3) ^ ^ ID 

TABLE I The table of Bob's measurement result, Alice's basis and Alice's measurement result in the 2d Mean King problem 



Then they'll get informed of the existence of an invader, hence discard the quantum channel. In ( Werner et a/.l . [2b09f ) . 



the security of this protocol in transmission-error-free scenario is proved. Next we will provide a more thorough 
analysis, displaying the most crucial quantitative result: the maximal allowed error rate(d isturbance). Of course, 
these protocol could be generalized to higher prime dimensional cases (jKimura et al. ],[200i), and we will also study 
them. 

B. The mean king retrodiction problem as a QKD protocol 

Next we study the QKD protocol based on this mean king problem. We start it by considering a d-dimensional 
system. This quantum retrodiction game is played by Alice and Bob who agree on a Hilbert space C, and a set of 
orthonormal bases of this space, |A, a), which means a-th basis vector of the A-th bases, the explicit form of it will be 
given later in Ea. (l316p . To start the game, Bob first uses a maximally entangled state ^ — ^ Yl'jZo N*) ^'^'^ ® C*^, 
sends the first particle to Alice and retains the other one. Alice then performs a projective measurement in a bases 
A at random, keeps both the bases A and the result a secret and returns the particle to Bob. This time. Bob would 
have a state |$A,a) = \A, a) ® \A, a), where \A, a) = J^tZo '^)*- Then Bob measures his state, after which Alice 

announces her bases A, and Bob is required to guess Alice's measurement result a. 

Bob's winn i ng str ategy has been discussed when Alice exploits mutually unbiased bases (iHavashi et al. . 2005 : 



Kimura et 'dl, I2006D as well as in a "meaner" way utilizing biased (nondegenerate) bases (jReimpell and Werned 



20071 ) ■ Although biased bases may be "meaner" for Eve to guess the right answer in every single run, she would 
probably do better asymptotically by using the correlations between bases to improve the guesses in a long term. As 
a result, in quantum cryptography, mutually unbiased bases would be a more desirable option, where correlations can 
be nullified. So, we would focus on the ex ploitation of mutually unbiased bases from now on. 

It is pointed out ( Hayashi et al\ . BoOSi ) that as a winning strategy. Bob should have a guessing function s{I,A) 
satisfying that 

{<^>A,a\I) = ■^SsiI,A),a, (313) 

where {|/)}/^^^ are orthonormal measurement base vectors for Bob in Hilbert space (E) C^, and further such 

{|/)}j^Q may exist if d is a prime. At the same time, there would exist a maximal set of mutually unbiased bases 
for such d's. The guessing function is explicitly constructed as, 

^ ^^ i n ~ Am, < A < d - 1 , 
s{im,n),A)^l ' , " " (314) 

m, A — a 

(m, n = 0, 1, 2, . . . , d — 1, I = nd + m), 

where n — Am should be calculated in the sense of modulo d. So Bob would have such a strategy utilizing his outcome 
of measurement |/) combined with Alice's announce of her bases A, the guessing function s{I, A) would always provide 
the result a correctly. 

The QKD protocol based on this quantum retrodiction protocol is that Alice and Bob collaborate such that they will 
share a secrete key a. Note that in the process of the protocol, only the measurement base A is publicly announced. 

C. Eavesdropping 



Th e security of th e QKD protocol is analyzed by considering a full coherent attack on both quantum channels 
( Werner et ah . |2009|) , namely Eve controls completely the preparation of entangled pairs, which are used by Bob 
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before sending one part of them to Ahce, as well as the feedback channel which is used for transmitting back the 
quantum state after a measurement by Alice. To specify the attack, in the former scenario. Eve initially prepares a 
maximally entangled state \^~^)bb' which will be shared for Alice and Bob. But she adversarial prepares another 
completely same entangled pair \^'^)ee', partially swaps her qubit with the providing entangled pair. Consequently, 
Alice and Bob both are partially entangled with Eve, in contrast, they are maximally entangled with each other if no 
Eve exists. So the whole system with Alice, Bob and Eve possesses a superposition of two pairs maximally entangled 
states, namely. 



/BB' 



EE' 



v/T^|$+)ba|$^ 



/EE' 



BE 



AE' 



(315) 



where p is a controllable parameter by Eve so that she can decide the extent of her eavesdropping. For the second 
channel. Eve is confined to only perforin a cloning-based individual attack on the particl e Alice sends to Bob after 
her projective measurement ( Brufil . Il998l : ICerj . Il998l : ICerf et al. I. l2002at lxio"ng et all I201I) . 

The set of mutually unbiased bases is formed by the eigenvectors of generalized Pauli matrices in dimension d, 



with ajj) = 1 7 



(jBandvopadhvav et al. 



and u! — e"^ d . So there are altogether d 
We can define, if d > 2 is a prime number. 



\A,a) = \ Vd^J=o 
' ' \a, A = d, 



d-l aid-j)-As^ 



0<A<d-l, 



1 mutually unbiased bases 



(316) 



where Sj = j + ■ ■ ■ 



{d — 1). Note that the definition differs slightly with ( Bandvopadhvav et all [20021 ) in sequence 
without deteriorating their properties. It is explicit that |^, a)'s (0 < A < d — 1, < a < d — 1) are the eigenvectors 
d, < a < d — 1, \A, a)'s are the eigenvectors of a^- We also know 



of a^o"^, and for A 



{ao\A,a) 



1 



Vd 



(317) 



For d — 2, the expressions of the bases are different. As we have already reviewed, the sets of states are in pi2p . 

With the whole system in the form of Ea. (l315p . Alice and Bob run the agreed QKD protocol as planned as if no 
Eve existing. Alice performs a projective measurement by a base randomly chosen from a subset of the d+1 mutually 
unbiased bases, for example g + 1 oi them {1 < g < d). Her state will then collapse to \Aq, gq), and be sent to Bob 
through a quantum channel controlled by Eve. Alice keeps the measurement result oq and the base Aq secret first, 
but announces Aq later after Bob receives the sendin g state. When [An, an) is sent by Alice, Eve will generally use 
the attack based on the scheme of quantum cloning ( Brufil . 119981: ICerill99j^. For case of 3 + 1 mutually unbiased 
bases, the scheme of quantum cloning attack is presented in ( Xiong et all 201^ . 

Namely, when Alice returns the particle j^Oj^o) through a quantum channel controlled by Eve, Eve can attack it 
by an asymmetric cloning, yielding. 



U\A,a)B\^00)E'E = y^^a7nnUm,n\A,a)A |$-m,n)g'g 
= bmn\^~m,n)AE' ^m.n|^, a)g, 



(318) 



with J2m n kninP = ^mn — 2 Sfc r o-kr^^^ '™, and Um,n = ^'z ■ Wc cau usc the foUowiug uotatious ( Xiong et all 

[ml. 



w, m = rt = 0, 
X, TO = 0, n 7^ or TO 7^ 0, n 
?/, otherwise. 



km. 



(319) 



where fc = 0, — 1, and w is a real number to be determined. 

By tracing out E and E', we discover that the density operator for Bob would be 



PBob — 



(1 -p)|Ao,ao)(Ao,ao| +p- 



®{ [v"^ + {d-l)x^]\Ao,aa){AQ,ao\ 



d-l 



[gx^ + {d- g)y'^] |^o, ao + j) (^o, oo + j| 



(320) 
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Note the second part has already been attacked by Eve through a quantum cloning, and v, x and y are parameters 
controlled by Eve so that she may optimize her attack. 
Similarly, the density operator of Eve takes the form. 



PEve 



p|^o,ao)(^o,ao| + {1-p)- 

d 



+ [gx'^ + {d - g)y'^] x x ^ |y4o, ao + j) (Aq, ao + j| \. 



(321) 



,2 1 

Without knowing Eve's attack. Bob would simply measure the states in bases as if no disturbance has 

been introduced in the system. Bob's fidelity is defined as his possibility to obtain the right result qq, namely 



Fsob — ^ ^s(I,Ao),ao{I\PBob\I)- 



(322) 



/=0 



Eve can use completely similar measurement to find the correct variable oq, and the possibility is quantified by her 
fidelity. 



D. Fidelities of Bob and Eve 



Next we try to find the analytic result of the fidelities. For d = 2, suppose = 0, ag = without lose of generality, 
then we have. 



PBob — 
PEve = 



1-p 

2 

1+p 



|0)(0| 



-I 

2' 



+ ||l)(l|J ® + ^')|0)(0| + [g^' + (2 - g)y']\l){l\}, 



® {(«'2 + a:'2)|0)(0| + + (2 - 5)y"] |1) 



2 ' ' 2 

Fidelities of Bob and Eve can therefore be explicitly calculated as. 



(323) 



(324) 



For d> 2 cases, we introduce the not ations, = \A,a ) (g) |A, a + ^ 0), and \^A,a) = a) (g) \A, a). 

Use similar method as discussed in ( Havashi et a/.l . [20051 ) . we can show that this set $ consisting of d{d+ 1) states 
{|'i'A,a)}^=o'a=o~^, is complete in the composite space C^, as presented below. Suppose a linear relation with 
some coefficients CA,a holds: 



X]cA,a|$A,a) = 0. 



(325) 



Multiplying bra vector ($A',a'| from the left and we immediately obtain, 



CA'a' + 



E ^E^-4,. = o, 



which implies that the coefficient CA.a should be independent of a. We have made use of the equation, 

($A',a|*A.a) = SAA'Saa' + ■ 



(326) 



(327) 



Now consider a subset ^Ao.ao which consists of c?^ states obtained by removing d states {\^A,a}}A^Ao,a=s{io,A) from 
<i>, where lo is defined as arbitrary / satisfying (5ao.s(/,Ao) — 1- The above equations still hold for ^'a^^ Since 
CA,s(ia,A) — for A 7^ Aq, we would have CA.a = for all A ^ Aq. And for A = Aq, we would have. 



^CAo,a\^Ao,a) = 0. 



(328) 
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Since |$Ao.a) are a set of orthogonal bases, we would have CA^,a = 0. Thus the (P states in are linearly 

independent and the set $ is complete in the d^-dimensional composite space ig) C*. 

As a result, | 'f^^ ao+k) represented in a unique way as the linear combination of the states consisted in • 

And we would use Gram-Schmidt orthogonal-normalization process to obtain the orthonormal basis in (g) first. 
It is obvious that 

{^Ao,a\<^Ao,a'}=Saa'- (329) 

So the first d basis, \^Ao,a)t=(j has already been orthogonalized as well as normalized. For other basis, now we consider 
the set |<&A,s(/o,A)+i+i)to ^^^^ ^ 7^ Ao(note that modular d is always omitted for convenience), and we have, 

($Ao,a|*A,s(/o,A)+l+i) = ^- (330) 

So for i = 0, the orthogonalized base would be, 

^ d-l 

IV'A,s(/o,A)+l) = |*A,s(/o,A)+l) - ^ l*Ao,a)- (331) 

0=0 

Taken into account that |$) = Yli=Q N) = Sf=o l*^'A,a) for arbitrary A's, we can conclude that J2t=o \^Ao,a) = 

Ejto l*A,s(/o,A)+i+i), and (V'A,s(/o,A)+ilV'A,s(/o,A)+i) = -^^d^ + {d- 1)^ = So we have generated another 

orthonormal base, 



I — d — r 1 

l</'A,s(/o,A)+l) = Y JZTl l*^>s(/o,A)+l) ~ ^ m l*A,s(/o,A) + l+i) 



(332) 



And for i = 1, since ((^a,s(/o,a)+i|*a,s(7o,a)+i+i) = -i^/d^^ the orthogonalized base is, 

d-l 



IV'A,s(/o,A)+l + l) = |$A,s(/o,A)+l+l) ~ ^ X] I^A,s(/o,A) + l+i) + |<?5'A,s(/o,A)+l) • (333) 



i=0 

Furthermore, we can calculate the corresponding normalized base. 



|</'A,s(/o,A)+l+l) = Y ■j—^[\^A,s{Io,A) + l+l) - J—^ Yl l*A,s(Jo,A)+l+i)]- (334) 

By repeating thc^ procedures above, we can figure out all the orthonormal basis are \^Ao,a)t=o ^^'^ 
^A,s(/o,A)+i+i)£"o^(for the latter set, A ^ Aq), where 



(\^Ao,a) = I Ao, a) (g) \ Ao,a), ^^^^^ 

\l0A,s(7o,A)+l+i) = \f^^ |*A,s(/o,A) + l+i) - Yfk=i l*A,s(7o,A)+l+fe) • 

Since the sets of MUBs can be related by a unitary transform, we can, for convenience, define Aq = d+1, without 
loss of generality. So ao+k) = |«o + +3) ® |ao + k). And as the property of MUB requires, 

(^0, ao\A, a) = (0;-")''-"° (a;-^)'"° . (336) 

Here w — exp{i%^}. 



ForA^Ao, 



($A,a|*2,oo+fe) = {A,a\Ao,ao + k){A,a\Ao,ao + k + j) 
= {Ao,ao + k\A,a){A,a\Ao,ao + k+j) 
1 
d 

= l^-i[a+4(2ao+2fe+j-l)] 
d 



(337) 
(338) 



As a result, 



h^ ,r 1**^' ) - i^-i(s(^o,A)+l)-4j(2ao+2fc+j-l) 

'>A,s{Io,A) + l+i\^Ao,aQ+k/ — ^'^ 



d — i 
d-i-1 



d — i 



E 

k=i 



-jk 



and 



Now we can explicitly represent l^*^^ ao+k) orthonormal basis we constructed before. 

And further, for j ^ 0, we have 



I Ao,ao+k/ dd-i-1 



^A[sa.a+k+j-Sao+k)-3(s{Io,A) + l) 



A=0 i=0 



X CO 



\ i=i / 

Taking into account that {I\^A,a) = ■^Ss(i,A}.a, we would have. 



d-2 



,^(sao + fe+3-«ao + ii)-j(«(-fo>^) + l) 



d-1 



d-1 



E -*^ , ,^(s»n + fc + 7-San + fc)-js(J0.^) 

V _tj-"JM^j(2'=+J-l)/2 



A=0 



If i ^ 1 - 2fc, we would have (/o|*Ao,ao+fc) = 0- Otherwise, (/o|*Ao,„o+fc) = " is decided by Iq. 

The density operator for Bob would be 



vO') 



PBob 



{l-p)\Ao,ao){Ao,ao\ +p 



[v^ + {d- l)x^] \Ao, ao){Ao, ao\ 



d-l 



+ ^[gx^ + 9)y^] \Ao,ao+j){Ao,ao+j\ 
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FIG. 9 (color online) Fevb - Fsob curve for various g's when d = 5. The curves are numerically calculated from Eq. (|344|) and 



using ([5^ . 



FBob = ^^(/o,Ao),ao|(l -P) K + {d-l)x^] (/o|$Ao,ao)($Ao,ao|-^0> 



P r 2 



d-1 



fe=0 
d-1 d-1 



+^ [ffx' + (rf - .9)2/'] E E(^oi*lS+,)(*t2+J^o) 

fc=0 j = l 

(1 - p) [v^ + {d- l)x^] +{l-p) [gx' + {d- g)y^] 
+ P y + (d _ + (d - 1)^ + (d - g)y^] 

{1-p) [v^ + {d + g-l)x^ + {d-g)y']+^-^. 



We have already used the equation J2i=o ^s(i,A},a\{I\^A,a)\'^ = 1 
Similarly, we can have Eve's density operator, 



PEve 



p|A,ao)(^o,ao| + (1 -P)^ 



d-l 



(344) 



[v'^ + {d - l)x'^] |v4o,ao)(^o,ao|+ [3a:'2 + (d-5)y'2]^|^o,ao+j)(^o,ao+j| ) (345) 



If Eve adopts the same protocol as Bob does, her fidelity would be, 

1-p 



FEve. — 



+ p[v'^ + {d + g-l)x'^ + {d-g)y'^ 



(346) 



To visually represent the performance of Eve, we choose (i = 5 as an example and plot optimized Feve (by tuning 
both p and v in the two quantum channels) as a function of Fsob in FIGE] With increasing Fsob, Feve diminishes, 
which coincides with intuition that with more disturbance. Eve gets more information while Bob loses more. Also, 
with the increase of g, security will be improved. 

This resul t is sim ilar with standard QKD protocols as studied in ( Brufil . [TqQSI : ICerf et al. l. l2002at [G isin et al. I. l2002t 
IXiong et all I2012D . In cases where Bob's fidelity is larger than that of Eve, the protocol is assumed to be secure. 
Moreover, we will show explicitly later that the retrodiction QKD protocol has a higher security. 
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E. Security analysis by mutual information in mean king QKD 

A QKD protocol is secure when mutual information between Alice and Bob is larger than that between Alice 
and Eve, under this condition can Alice and Bob use classical error correction and privacy amplification methods 
isin et all . 12002.) to guarantee a secure communication. In the retrodiction QKD scheme, Alice 
sends each state in Aq with probability ^, and Bob would obtain the right result gq with probability Fsob- 

First, we can explicitly write the final states of quantum states associated with Bob and Eve as, 

I -J^i) BAi) sAi) E{ + Vl -pK>-Bi XI -7^ I a') fill a') b; + \/P XI -7=\(^') BiW) E^\i) e{ 

m.j \ n / 

As the calculation in (|Xiong et adl2012h . we have, 

Iab = - ^ p{ai,a2)\og2p{ai,a2) 

ai ,a2 

+ X P(*)p(ai>a2|i)log2p(ai,a2|i), 



(347) 



Iae = - X ^'(ei, 61,62, 62) log2p(ei, 61,62, 62) 

61,6^,62,62 

+ X P(*)p(ei,e'i, 62, Bali) log2P(ei, 6^,62, Bali), 



z,ei ,62 

Assume that Alice measures her states randomly, so p{i) = ^ for arbitrary i. Thus, 

p{ai,a2) = jS2p{ai,a2\i), 



p(ei, 6^,62, 62) = j ^p{ei,e[,e2,e2\i). 



And we can further deduce that oi and 02 are independent, and ei, e[ are independent on 62 and 62, which is due to 
the uncorrelation of two quantum channels when Eve attacks. As a result, 

p{ai,a2\i) = p{ai\i) ■ p{a2\i), 
p{ei,e[,e2,e2\i) = p{ei,e[\i) ■ p{e2,e2\i). 

In addition, we have the following considerations. 



p{ai\i) 
p{a2\i) 

p{ei,e[\i) 



+ (d - l)^^, 02 = i, 
[gx^ + {d - g)y^ , a2 ^ i. 

0, e[y^i,ei^e[. 



p{e2,e2\i) = < 



( [v+{d-l)x] 
d 

{v-xf 

d ' 
[gx+(d-g)y\ 
d 



-, 62 =€2=1, 
62 = 63 7^ i, 

, e'2 = «, 62 7^ i. 
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To analyze the secu rity of this protocol, we have two different definition of disturbance: Dj and Dp, as explained in 
(IXiong et aLl . l2012D . 3ere Dj is defined by optimizing parameters p, v so that maximized Iae ~ Iab is obtained with 



a certain Fnn h- Then we can ob tain a critical F^^^, where max{J^£; — Iab} = 0, and Dj is defined as 1 — F^^^^. But 



for Dp, as in ( Cerf et al\ . \2QQ2s^ \ . we fix parameters p, v for a given FBob when maximal Fpve is obtained. Then F-^ 



Bob 

is defined by Iae — Iab = 0, and its correspon ding disturbance Dp = 1 — Fg^j^. These two definitions may lead to 



different results, as shown in (jXiong et al Since we hope to directly analyze mutual information, adopting Di 

as the index of disturbance is more appropriate. In this scenario, the protocol is secure if and only if Bob's fidelity is 
larger than 1 — Dj. Some numerical results are in TABLE HIl 





d 


g 


1 


2 


3 


4 


5 


6 


7 


Di{%) 


2 


15.64 


16.62 












3 


22.92 


24.31 


24.57 












5 


39.72 


41.27 


41.51 


41.60 


41.65 








7 


46.88 


48.05 


48.20 


48.27 


48.31 


48.33 


48.34 



TABLE II Disturbance Dj associated with maximal Iae 
Di = 1 — Fg^fj, where -Fsot. is Bob's fidelity with max{/A£; - 
methods to reduce exponentially small Eve's information. 



- Iab- Corresponding parameters p and v are optimized, and 
Iab} = 0. When FBob > 1 — -D/, Bob and Alice can use classical 



F. The retrodiction QKD is more secure than BB84 and six-state protocols 

For d = 2, we have the fidelity expressions p24p . And for fixed Fbo&, we can choose parameters v and p to maximize 

Fpve- And from previous results (|Xiong et aLl . l2012l ). we have, for BB84 protocol, Fpve = 5 {V^Bob + VI — FsobY , 

and for six-state protocol, Fpve = {VSFBob - 1 + VI - FBob) /V8 + (1 - FBob) ■ These four cases are illustrated in 
FIGHni Interestingly, it is clear that the retrodiction QKD protocol presented here is more secure than BB84 protocol 
and six-state protocol, i.e., with fixed disturbance {FBob is fixed). Eve's probability to figure out the correct result 
is lower. And using 3 bases {g = 2) is even more secure than 2 bases((7 = 1). This conclusion can be confirmed by 
comparing numerical results of traditional QKD (explicitly shown in TABLE IIIip with our results. 
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4 


5 


6 


7 


Di{%) 


2 


14.64 


15.64 












3 


21.13 


22.47 


22.67 












5 


27.60 


28.91 


29.12 


29.20 


29.23 








7 


30.90 


32.10 


32.26 


32.32 


32.36 


32.38 


32.39 



TABLE III Disturbance Di in (jXiong et all I2OI2I ). Every entry is exactly smaller than corresponding ones in mean king 
retrodiction protocol. 



G. Discussions about mean king problem 

In summary, we have explicitly shown that the mean king retrodiction QKD protocol, like standard QKDs such 
as BB84 and E9I, is unconditional secure. Its security is analyzed by considering attacks on both the entangled 
pair preparation and quantum state transmission. Interestingly, this QKD protocol has a higher security than the 
corresponding standard QKD in the sense that it tolerates higher error rate. Our security analysis is based on two 
methods, comparison of fidelities for Bob and Eve, and comparison of mutual information. This security proof can 
be extended to completely coherent attack by considering multipartite scheme, which is similar as standard QKD. 

By considering the efficiency of the mean king retrodiction QKD, one can find that it has the advantage of generating 
a raw key in every single run no matter how many mutually unbiased bases are utilized. For comparison, in standard 
QKD by exploiting g -\- 1 mutually unbiased bases, there would only have a raw key in -I- 1 runs on average for 
Alice and Bob. Of course, if quantum memory is available, it can also have a high efficiency in generating raw 
keys. However, the current quantum memory has limited storage time, it is still possible that the retrodiction QKD 
protocol needs short-time memory since no announcement of bases is necessary for the measurement of Bob, this is 
quite different with the standard QKD. 
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FIG. 10 (color online) Fevb vs FBot curve for d = 2. In our scenario, the mean king retrodiction QKD has higher security than 
both BB84 and six-state protocols. 



The BB84 QKD protocol is almost commercialized. As generally accepted, there is no doubt that the protocol 
itself is secure, however practically, its security relies significantly on physical implementations. So it is still of great 
interest if we can have a simple but more secure QKD protocol. As we have shown that retrodiction QKD protocol 
is more secure, and it can generate a raw key in every single run, it is hopeful that it can open a new direction for a 
practical QKD implementation. 
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X. SEQUENTIAL UNIVERSAL QUANTUM CLONING 



In past years, theoretical research on quantum cloning machines have progressed great ly. At the same 
time, experimental! 



y various cloning schemes have been realized , by using polarized phot ons (llrvine et al\. 
], I2OO2I : iPelliccia all . l2003l : iRicci et all l2004[ ) or nuclear spins in NMR (jCummins et all 



Lamas-Linares 

Du et a/.r2005 ). However, these experiments are only restricted to 1 
general case oi N M cloning unsolved. The difficulty of realizing N 



2004; 



20021: 



► 2 or 1 3 cloning machines, leaving the 
M cloning mainly arises in preparing multi- 
partite entangled states, since it is very difficult to perform a global unitary operation on large-dimensional systems to 
create multipartite entangled states. While on the other hand, using the technique of sequential cloning, one may be 
able to divide the big global unitary operation into small ones, each of which is only concerned with a small quantum 
system and as a result makes it possible to get the desired entangled state. Se veral quari t um cloning procedures fo r 
multipartite cloning were proposed, but they are not in the sequential method! Fan et all . l2003HSimon et at. I. I2OOOD . 
In 2007, based on the work o f Vidal (|Vidat l2003l ) . Delgado et al. proposed a scheme of a sequential 1 — )• M cloning 
machine! Delgado et al\ . l2007l ). Since the procedure is sequential, it significantly reduces the difficulty of its realiza- 
tion. Later, Dang and Fan came up with a scheme which makes the more general N ^ M sequential cloning possible 
(|Dang and Fanl . l2008D . The case of iV — >■ M sequential cloning of qudits is also proposed briefly, yet the details are 
not presented. The essential idea of sequ ential method is to express the desired state in the form of matrix product 
state (MPS), and according to results in ( Schon et a/.l . |2005|) . any MPS can be sequentially generated. On the other 
hand, it is also pointed out that sequential unitary decompositions are not always successful for genuine entangling 
operations (|Lamata et al 1 12OO8D . Here in this section, we will present in detail how the procedure of 1 — > M and 
N ^ M sequential cloning works. 



A. 1 M sequential UQCM 



According to the method of Delgado et a/. ( Delgado et aL] . l2007f) . we first need an ancilla system of dimension D. 



Let T-La denotes the D-diniensional Hilbert space of the ancilla system, and T-Lb the 2-dimensional Hilbert space of 
one qubit. In every step of the sequential cloning, we perform a quantum evolutional operator V on the product 
space of the ancilla and a single qubit. Here we suppose that each qubit is initially state |0) which will not appear in 
the following equations. V then can be represented by an isometric transformation: V : Ha ~^ T~La ® ^B; in which 
^ = X^i a I3^a 13^^ Let = ^ ^|a)(/3|, then is a DxD matrix and satisfies the isometry condition 

Tlii V'^^V^ = I. Let the initial state of the ancilla be 10/) G T-La- We make the ancilla to interact with the qubits once 
a time and sequentially, after the unitary operation, we would not recover the ancilla state. So when n operations 
have been done, the final output state of the ancilla and all the qubits take the form, l^t^) — V^["l ...V^I^lyl-'^l |(/)/), where 
indices in squared brackets represent the steps of sequential generation. Now we need to decouple the aniclla from 
the multi-entangled qubits, and then the n-qubit state shall be left: 

IV')- E {MV^''^'-...V^'^''\H)\ii...in), (348) 

where (jip represents the final state of t he ancilla. For 2-d i mens ional system {|0), |1)}, the cloning transformation of 
the optimal 1 — >■ M cloning machine is ( Gisin and Massail . Il997f) : 



M-l 

|0)^|i?)^|vI/(^°))= mM - 3)0. 3l)®\{M- 3 -1)1, (349) 

M-l 

\1)®\R) ^ |*iy> = E Pm-i-i\{M - 3 - + 1)1) ®\{M - 3 - 1)1,]Q)r, (350) 

in which = ^2(M - j)/M{M + 1), \{M - j - 1)1, jO);? is the final state of the cloning machine, and |(M- j)0, jl) 
denotes the normalized completely symmetric Af-qubit state with {M — j) qubits in |0) and j qubits in |1). In order 
to clone a general state \4>), it is necessary to know how to sequentially generate the states 1^'^°'') and 1^'^)' ^ 
result of which we need to express these two states in the MPS form: 

l*i?> = E ('/'i"VJ"'"-^o™"|0)i.Ni...z.), (351) 
l<y>= E (4'Vl'"'^"•.•W''"|0)z.|^l...^„). (352) 
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Now we aim to get the explicit expression of the matrices V^f^'^'' and V^ '^^'^^ . A way to do so is by using Schmidt 
decomposition(SD) ()Vidail2"003( ). see textbook ( Nielsen and Chuand . 120001 ) ■ Consider an arbitrary state l^*) in Hilbert 
space the SD of \^) according to the bipartition ^ : B is 

m=Y.^.\^^^WS^). (353) 



where |$k^l)(|$L^l)) is an eigenvector of the reduced density matrix p^^\p^^^) with eigenvalue |AqP > 0, and the 
Schmidt coefficient Aq satisfies = Aa|$[f' ). 

With the help of SD, we proceed the following protocol: 

1. Compute the SD of \^) according to the bipartite 1 : n — 1 splitting of the n-qubit system, which is 

l*)-E^"ll'J'al)l'J'L'r"') (354) 

= ErLf^^L'|Ni)K-"i), (355) 

ii ,ai 

where in the second line we have expressed the Schmidt vector in the computational basis {|0),|1)}: 

2. Expand |$ai' "') in local basis for qubit 2, 

3. Express by at most x Schmidt vectors |$Q2' "')(the eigenvectors of pl'^ ' "'), where a2 ranges from 1 to x 
and X = niax^XA, here XA denotes the rank of the reduced density matrix pA for a particular partition A : B 
of the n-qubit state: 

l^-.r')=Er[?|:?.AS|$g;-"l), (357) 

[21 

where Aii2 's are the corresponding Schmidt coefficients. 

4. Subsitute ((555)) and ((557)) into (I55I)) . we get 

l*>- E r[i^AWrLt4ALlKi»2)|*£--"^)- (358) 

it ,ai ,12 ,C(2 

Now it's easy to see if we repeat the steps 2-4, we get the expansion of \'^) in the computational basis: 

l*)=E-E^H--"l*i)-l*")' (359) 



where the coefficients Cij^...;^ are 



c......„= E rW-AWrM-ALI-.-rW-. (360) 

Ql , . . .,ari — l 

Through comparing equations p48p and ([360]), we are able to construct vj'^'*'' and v}''^^'' explicitly. The detailed 
work is omitted here since in next section about the more general N ^ M sequential cloning case, each step of getting 
the matrix is provided. 

When the input state of the cloning machine is an arbitrary state j?/;) ~ xq\Q) + xi |1) (normalization condition 
is satisfied: \xq\'^ -I- \xi\'^ — 1.), according to the linearity principle of quantum mechanics, the state after cloning 

transformation is xqI^'^*}'') -\-xi\^^^^)^ which can also be sequentially generated. First, view the arbitrary state and 
the ancilla's initial state |0)d as a unified state: |</)/) = \'ip) ® \Q)d- Then use the qubit fc,(/c = 1, 2, ...,n), sequentially 
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to interact with the ancilla according to the 2D-diniensional isometric operators T/['^l*'= = |0)(0|(8)lo + 11)(1| . 
After aU qubits have interacted with the ancilla, perform a generalized Hadamard transformation to the ancilla 

|O)|<^^°')^i=[|O)|0(?V|l)l0i.'^)] (361) 
|l)|0(,^))^i=[|O)|0(!?V|l>l0i.'^>] (362) 

Now measure the ancilla with the basis {|O)|0^''), ll)!^^^'')}, either result occurs with probability 1/2. When the result 

is |0)|(/)^^), we get the desired state xqI^'m ) + ^iI'^a^i)'! while if the result is |1)|0^^), we need to perform a 7r-phase 
gate upon each qubit, and the desired state will be obtained. 

To realized the above 1 ^ M cloning scheme, an ancilla system of dimension 2M is needed, while if we take a 
global unitary operation to accomplish the cloning, the dimension of the unitary operation will increase exponentially 
with M . So we see sequential cloning is much easier to realize experimentally. 



B. iV M optimal sequential UQCM 

In this section, we will discuss the more general case N ^ M optimal sequential UQCM. An arbitrary qubit is 
written — xo\0) + xi|l)(|xoP + |j/oP — 1), then N identical can be expressed as 

N 

1*)®^ = ^ x^-"'xTy/C^\{N - m)0, ml), (363) 

where = ,nti^l^Lm)\ ' ^^'^ K-^ ~ m)0,ml) denotes the normalized completely symmetric N-qubit state with (N-m) 
qubits in state |0) and m qubits in state |1). 

It is well known that the optimal UQCM transformation for completely symmetric statesl Gisin and Massailll997l ) 

is 

M-N 

|(iV-m)0,ml)® |i?) |^'^7)) = Pmj\{M^m~j)0,{m + j)l)<S)\Rj}, (364) 

3=0 



where Pmj = y C'^_^_jC;^^^/C^^^, Rj denotes the final states of the cloning machine, and for different j, \Rj)'s 

are orthogonal to each other. Here we can choose \Rj) — \{M — N — j)l,jO)ji. Since we have found the cloning 
transformation of any state in the form |((A'^ — rn)0,rnl), according to the linearity principle of quantum mechanics, 
the transformation for N arbitrary state |^) is 

N 

1*)^^ ® \R) ^ |*A./) = J2 2:o^"™<v^l*^^), (365) 

m=0 

here \'^m) is the final state of all the qubits and the cloning machine we hope to obtain, like the 1 — > sequential 
UQCM case, we first need to show how |^^7'') ^'^ sequentially generated. Hence it's necessary to know the MPS 
form of l^^^M^): 

l*M^)= E {MV^'''-''^'''"-".:V^'^''\h)h.:i2M-N), (366) 



2l ■■■1'2A'I-N 



where FHi-(i < n < 2M ~ N) is a D X D dimensional matrix, and satisfies the isometry 
condition:X;,„(V"["l'")^V^["l'" = /. Now we shall follow the idea of SD, and give detailed elaboration on how to 
get the explicit form of 

1. Case n = 1. 
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Compute the SD of |*^^) according to partition 1:2...(2M-N): 

M-N 



(m) 



= ^ 1 (M - m - j) 0, (m + j) 1) ® \Rj) 

ai 

= |o)0aW|#-(")]) + |i)®aW 

where through comparing the first and last Hnes, we get 



[2...(2M-N)] 

'2 



(367) 



^[2...(2M-JV)] 



fc=— m 



|(M - m - A: - 1) 0, (m + fc) 1) (g) |i?fe)/Ay 



[1] 



M— m — 1 / ^m+fc 

^[2...(2M-A.)]\ ^ ^^^^^^ / M-1_|(^_^_^_^^0^(^^^^^^^|^^^^^/^[1] 

k=-m V 

Compare the last two lines, we also have 

Now use the condition of normalization, Schmidt coefficients could be calculated. 



\ fe=- 



M-m-l 



E02 ,[1] _ 



M 



M-m-1 



^m+k 



\ ^m(fe+l) ^m+k+1 ' 

^ fe=-m 



Then we have 

= r[l]ii \[1] 

The explicit form of y I^l'i is given in the appendix, so is other y I'l'" . 

Next, wc will not present the detailed calculations for other cases since the method is almost the same, but only 
list the results. 

2. For 1 < n < M — 1: We calculate the SD of l^"^^) according to partitions. The results are: 



M—m—n f-rni+k 

A 2^ Pm{j+k) ^m+j+k ' '^J+l ~" \ 

\ k=-m \ 



M-m-n+1 



k=—m 



/^m+k 
m{j+k) ^m+j+k ' 



y,[n]0 _ e V 



p[n]l r 

0+l)a„ - <^0+2)a„ 



And for this case, the summarized form is Vi"a"_i = F^^!," a^A^j. 
3. Case n = M: We have. 



xW] _ o [M-1] _ 



i 



— m+l (J^ 
k=-m 



va+k 



'rj+k ■ 
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And also, 



.[M]0 



(i+l)aM - ""A/ + 1) [M-1] 



^3 + 1 V 



^[M]l 



Similarly, for this case vi^}aM-i = ^aM-'^^aM^at} ■ 
4. Case M + I {1 < I < M - N): We have, 



. [M+i] 
S + 1 



\ 



?Ti(j + fe— m) ^j+k—m 



fc=0 



M-N 



^l-l 



k=0 



p[A/+i]0 _ ^ 
(j + 1)qm + i ~ °°'M + a 



rtj-m-l 

^M-N-l jy\M+l] 
'-^M-N-l+l 



-.[M+l]l _ . 
(] + l)aM + l "aM + lij + l)' 



M-N-l + 1 



r[M+l]iM + l ^ j.[M + l]iM + l ^[M+l] 



Up till now, we have calculated out the explicit form of every 1/1*=]*'=, and since depends on m, we denote 

it as vj-^^'' here after. Through computation, we can get the smallest dimension needed for the isometric operator 



D^{ 



M - N/2 + 1 if N is even; 

M - (iV - l)/2 + 1 if N is odd. 



(368) 



So we see D increases linearly with M, which shall significantly ease the difficulty of sequential cloning. 

Based on the above computation, we have known that the state I^pI^^) can be expressed in the MPS form, so the 
iV-qubit pure state \ {N — m)0, ml) can be sequentiall y transformed to Now in order to sequentially clone the 



iV-qubit |^')«'^ to M qubits, the scheme is as follows (|Dang and Fanl . 120081 ). 

1). Encode the N-qubit l^p)**^ in the ancilla, which makes the initial state of the united ancilla 



N 



= E 4'"'<VC^m - m)0,ml) ® \0)n. 



(369) 



m— 



2). Build the operators 



JV 

m— 



(370) 
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3). Let all the qubits interact sequentially with the united ancilla according to the operator T/^'^l*'', we get the final 
state of the whole system 

N 



M /' 



where IvJ^"*) is the final state of the ancilla when the input state is \{N — to)0,to1). 

4). Perform a generalized Hadamard gate on the ancilla (quantum fourier transformation) 

1 ^ 

|O)«^-"|l)®™0|(/9^")) ^ -^^= e'^|0)«^-'"'|l)«'"'<8)|^^'"'^ (371) 



after which the final state becomes 

N 



m — 

where 

N 



- |0)«^-™'|l)«'"' ^ (372) 



I^m) - E e'^x^--^xT^\^^M^). (373) 



m=0 

\(g)N~rrL' U\®m' fr^ |,.(™')\lJV 



5). Make measurement on the whole ancilla with the basis {lO}** ™ |2)«"" (g) |^'^ )}m'=o- When the result is 
Tn! — 0, the desired state I^Pm) — X/m=o 

'"a;7yC™|5'^7^) is directly obtained. If the measured m' ^ 0, then we 
need to act a local phase gate Us on every qubit. Through computation, a proper phase gate is 

C/s = |0)(0|+e''^|l)(l|, (374) 

where 9 — — . With the effect of the phase gate, the output state becomes 

|vl/';,)=e'(*^-^)«|vl/,,). (375) 

Since the phase e^i^-^)^ won't affect, the output state is what we want. Now it can be seen we have realized the 
sequential iV — >■ M UQCM. When iV = 1, all the results coincide with the 1 — >■ M case in last section. 

Recently, the sequential cloning concerning about the real-life experimental condition is investigated in 
( Saberi and Mardoukhil2012[) . 



C. Sequential UQCM in d dimensions 

We now further proceed to a more general case where qubit is extended to qudit. In the space of d dimensions, an 
arbitrary quantum pure state can be expressed as 

d-l d-1 

l*)=E^'N)'El^'l' = l- (376) 

i=0 i=0 

Then N identical such qudits will be expanded in symmetric space as( Wernerl . Il998f) 

i^)-- = E/l£^.r-<M-), (377) 

m— 

where |m) denotes the symmetric state, whose form is 

|m) = |miO, m2l, md{d - 1)), (378) 
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which means the symmetric state \m) has rrii qudits in the computational base |z)(i=l,...,d), and the sum of qubits 

in each base satisfies J2i=i '^i = ^• 

Take the symmetric s tate \m) as the input state of the optimal d-level UQCM according to Fan et al's 
schemel Fan et a/T l2001al) . the corresponding M-qudit output state will be 



= E M^ + O) ® l^.->, (379) 
where the vector j = {ji,j2, ■■■3d) satisfies X]f=iii ~ M — N, \Rj) = \ j)R denotes the state of the cloning machine, 



and Prnj — Y 11^=1 ^mi+ii/^M+d-i- "^^^ following steps are similar to the 2-level case presented previously. We 
still need to find the MPS form of the state Ivfj^^-*), and the method is through SD as well. Express l^'j^T*'') in the 



computational basis 

\^if)= E {v^r^\V^'^'-''^''"-"■■■V^'^''\0)D^\^l■■■^2M-N) (380) 



Through computation, can be obtained (|Dang and Fanl . [20081 ) . whose detailed process is just a direct extension 

of the 2-level case and shall be omitted here, the result is provided in the Appendix. Besides, we will also know that 

the necessary dimension of the ancilla is Dd = C yN^i ^, where the symbol \X\ denotes the floor function. So 

we see when d > 2 Dd is far smaller than cIm, which shows the advantage of sequential cloning of qudits. 
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XI. IMPLEMENTATION OF QUANTUM CLONING MACHINES IN PHYSICAL SYSTEMS 

In general, the cloning machines can be realized by the corresponding quantum circuits constituted by single qubit 
rotation gates and CNOT gates just like other quantum computations. This is guaranteed by the universal quantum 
computation (jBarenco et aL . ,1995,) . 



A. A unified quantum cloning circuit 

It is interesting that the UQCM and the phase-covariant QCM can be realized by a unified quantum c loning circuit 
by adj usting angles in the single qubit rotation gates, as shown in FIGlTT]first presented by Buzek et al. ( Buzek et al\ . 
Il997al ) . Let us consider the definition of single qubit rotation gate ((33|) with a fixed phase parameter which can be 
omitted, it can be written in matrix form as, 

A, „^ ( cosd sint? \ , . 

cos^j- (3^^) 

The form of CNOT gate is in (p4l) . Here we use subindices in a CNO T gate, CNOTjk, to specify that the controlled 
qubit is j and the target qubit is k. Following the copying scheme in ( Buzek et al\ . \l997a^ . the cloning procession is 
divided into two unitary transformations, 

l*i7^|o)aJo)a3 ^ ^ miTa'L- (382) 

The preparation state is constructed as follows, 

l*)iraT^ = R2{^3)CNOT32R3{^2)CNOT23R2{^imaMa,. (383) 

The second step is as, 

l*)iral. - CNOTa,a,CNOTa,a,CNOTa,a,CNOTa,aM^:''^mtaf- (384) 

We may find that two copies are in 02,03 qubits. For UQCM, the angles in the single qubit rotations are chosen as, 

1/2 

8' ,2 3 



1 = i?3 - ^^2 = - arcsin ( ^ - ^ ) ■ (385) 



This scheme is fiexible and can be adjusted for phase-covariant quantum clonin g. We only need t o choose different 



angles for the single qubit rotations, and those angles are shown to be as follows (|Fan et 



y need to 
l l2001bD . 



1^1 = "i^s = arcsin ( , t?2 = — arcsin [ j . (386) 



2 2V^ 

To be explicit, we may find that the preparation state takes the form, 

I*)ira7^ = ^I00)a.a3 + ^(|01)a.a3 + |10)a.a3)- (387) 

The second step for phase-covariant quantum cloning is the same as the that of the UQCM. So this cloning circuit is 
general and can be applied for both universal cloning and phase-covariant cloning. 



B. A simple scheme of realization of UQCM and Valence-Bond Solid state 

We already know that the universal cloning machine can be realized by a symmetric projection. This fact can 
let us find a simple scheme for the implementation of the universal cloning machine. The simplest universal cloning 
machine can be obtained by a symmetric projection on the input qubit and one part of a maximally entangled state. 
This symmetric projection can be naturally realized by bosonic operators in the Fock space representation. Suppose 
the input state is a|j, the available maximally entangled state is alfa\{ + OyOy, here H,V can be horizontal and 
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\ / ai 



|0)a.- 
|0)a3- 



Preparation 



Copying 



I* 



out 

010203 



Quantum Cloner 



FIG. 11 Quantum circuit implementing quantum cloning machines. This quantum circuit can realize both universal cloning 
machine and phase-covari ant quantum cloning machine by adjusting parameters in the single qubit rotation gates. This circuit 
is the same as the one in l|Buzek et all Il997al ) . 



vertical polarizations of a photon, or any other degrees of freedom of the bosonic operator. We also suppose that 
those operators are acting on the vacuum state, then we have. 



+ alrol ) = 



2 (a^)^ 



4 



t .t ^ 
v) 



V3. 



(388) 



Now we consider that the last bosonic operators are acting as ancillary qubits, in Fock space representation, ^ 

corresponds to two photons in horizontal polarization, while aJ^Oy is a symmetric state with one horizontal photon 
and one vertical photon. By a whole normalization factor -y/S, the above formula then takes the following form, with 
initial state \H), 



Similarly for a vertical photon, we have 



\m\H)a 



\2V)\V)a 



H,V))\V)a. 



H,V))\H)a. 



(389) 



(390) 



It is now clear that those two transformations constitute exactly a UQCM. This fact is noticed by Simon et at. 
Actually it also provides a natural realization of the UQCM by photon stimulated emission. Based on the experiment 
of the preparation of maximally entangled state, the UQCM can be realized by the above scheme which we will present 
later. 

For no-cloning theorem, a frequently misunderstanding point may be that, it seems that "laser" itself can provide 
a perfect cloning machine, one photon can be cloned perfectly to have many completely same photons. This seems 
contradict with no-cloning theorem. The point is that we can for sure clone a photon to have may copies. However, 
the no-cloning theorem states that if we clone horizontal and vertical photons perfectly, we can not clone perfectly 
the photon superposition state of horizontal and vertical. Thus "laser" does not conflict with no-cloning theorem. 

When a maximally entangled state is available, it seems that a UQCM can be realized. I n conden sed matter physics, 
the Valence-Bond Solid state is constructed by a series of singlet states, see for example (jFan aL .2004) . 



N 

\VBS) = n ( 



4+A 



1=0 



(391) 



where sites and A'^ -I- 1 are two ends. We remark that the sites in the bulk will be restricted to the symmetric 
subspace also by the reason of Fock space representation as shown schematically in the following: 



1 2 N 
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By the same consideration as presented above, since one singlet state is a maximally entangled state, the UQCM 

can be realized if the input state is put in site 0, (aoQ + /3&q) (^o,Qb\ — a|&Q^ . Further one may notice we do not need 

to restrict just a singlet state where only two sites are involved, a whole one-dimensional Valence-Bond Solid state 
can be dealed as a maximally entangled state so that a UQCM can be realized like the following: 

{aal + f3bl)\VBS). (392) 

The state of input aaj -|- /3&q is like the open boundary operator. One feature of this universal cloning machine may 
be that the ancillary states are at one end of this ID state, t he two copies are located on another end. This system 
is like a majorana fermion quantum wire proposed by Kitaev ( Kitaevl . l200l[ ) where the encoded qub it is topologicall; 



£1 



rotected. It is also pointed out that the cloning machine can be realized by networks of spin chains ()De Chiara et al.\ . 



2004) . 



C. UQCM realized by photon stimulated emission 

With the results in last section, one may realize that a maximally entanglement source may provide a mechanism 
for quantum cloning. The corresponding fidelity is optimal. It seems that ph oton stimulated emission possesses such 
a property and can give a rea lization of the UQCM. This is first proposed in ( Kempe et al\ . l2000l : ISimon et "^. l200flh 



and realized experimentally ( Fasel et al\ . 12002 : iLamas-Linares et al\ . 120021 ). In this scheme, certain types of three- 



level atoms can be used to optimality clone qubit that is encoded as an arbitrary superposition of excitations in the 
photonic modes corresponding to the atomic transitions. Next, we shall first review briefly the qubit case followed by 
a general d-dimens ional result. 

For qubit case (jKemoe et all hOOCt [s imon et al we consider the inverted medium that consists of an 



ensemble of A atoms with three energy levels. These three levels correspond to two degenerate ground states \gi) and 
\g2) and an excited level |e). The ground states are coupled to the excited state by two modes of the electromagnetic 
fleld fli and 02, respectively. The Hamiltonian of this system takes the form, 



(N ^ \ 

«iEl^')(5i'l+«2Ele')(32l 
fc=l k=l ) 



H.c. (393) 



We then introduce the operator as brC^ = X^fcLi |c'^)(ffrli = li2, where is a creation operator of "e-type" 
excitation, br is a annihilation operator of gr ground states, r = 1, 2. Now the Hamiltonian p93|) becomes as, 

n = -f{aibi+a2b2)c' +H.C. (394) 

Now we flnd that the source of maximally entangled states is available. The input state can be considered as the form 
(aal -1-/34)1 0,0) = 0) -|-^|0, 1). The number of copies in this cloning system is restricted by the number of atoms 
in excited states '8)^i|e'^) which are represented as (c^)^/-\/iVT. We may consider that initially there are i + j qubits 
in a\ and a\ which corresponds to a completely symmetric state with i,j states in two different levels of qubits, 

\^.n,i^,J)) = 10) 

= \ia,,Ja,)\0b„0b,)\N,) 

= \i,j}a\0,0}b\N),. (395) 
With the Hamiltonian (|394p . the time evolution of the state starting from the initial state p95p becomes as follows, 

|*(i),(*,j)>=e-*^*|*.„,(»,j)) 

N 

= E(-zm)7p!|*,„,(z,j)) =E/Kt)|F,,(i,j)), (396) 



1=0 



where = |foj (*jJ))j ' is the additional photons emitted corresponding to additional copies, thus there are 

altogether i-f j-f / copies in the output which is expressed as |_Fi, (i, j)). In this process, the states with different copies 
are actually superposed together. The amplitude parameter in the superposed state corresponds to the probability of 
flnding / additional copies which is \fi{t)\'^. 
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To show that this process is exactly the reahzation of the optimal UQCM, we can show that the corresponding 
cloning transformation with I additional copes can be calculated as, 



\t,j)a\0,0)b\N),^\Fi,ii,j)) =J2^ 

k=0 



^!(^ + J■ + l)! {i + 1 - ky.u + ky. 



ii + j + i + iy.^ i\j\k\{i-ky 

\i + l-k,j + k)a\l - k, k)b\N - Oc. (397) 

This is indeed the UQCM. In addition, this provides an al ternative method to find the optimal cloning transformations. 

The higher dimensional case can be similarly studied ( Fan et all . |2002[ ). Now the atoms have one excited state |e) 
and d (d > 2) ground states \gn),n = 1,2, - • • ,d, and each coupled to a different photons a,i corresponding to modes 
of qudit. The Hamiltonian can also be written as a generalized form, 

y-d = liaibi + ■■■+ aabd) + H.c. (398) 

The initial states which are symmetric states are, 

1*™, J) = n ^^|0) ^ |J)a|0)fc|7V)., (399) 

where j = (ji, j2, • • ■ ,jd)- One can find that the time evolution of states for qudits is the same as that of qubits p96p . 
So the probability to obtain additional I copies is |//(t)p. We use the notation \FQ,j) = j), ^^ji — M, and the 
output of cloning with I additional copies can be obtained as. 



{M + d-iy.u " {h + j,y 



{M + i + d-iyfj^^ kyj,\ 

\j + k)a\k)b\N (400) 

where summation runs for all variables with constraint, Ylt^i — ^- thns realize the optimal UQCM for 
qudits. 

Explicitly, the action of Hamiltonian on the symmetric states takes the following form. 



-HdWuj) = ^{^{1 + 1){N - 1){M + I + dyPi+iJ) 
+ yJl{N -l + l){M + l + d- l)|F(_i, j), 

1<1<N, 
Hd\Fo,j)^jVN{M + d)\F,J), 



nd\FN,j) ^lVN{M + N + d~l)\FN-uj). (401) 
To end this subsection, we present our familiar results of UQCM but in this photonic system. An arbitrary qudit 
takes the form, |vl>) = X^iLi "^^th. J2'i=i l^iP = 1- -^^y expansion, it corresponds to state, 

I*)""*' = (^x.al)«*-^|0) 

i=l 



ji i=l 



With the help of cloning transformation (I400p . the output of cloning is, 



^Y[±Jih±J^g+k)A, (403) 
i=i V 

As we already know, this is the UQCM of qudits. 

Quantum cloning itself is reversible since it is realized by unitary transformation. This does not necessarily mean 
that the cloning real ized by photon stim ulated emission can be inverted. However, it is proposed that this inverting 
process can succeed (jRaeisi et al I I2012D . 
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D. Experimental implementation of phase-covariant quantum cloning by nitrogen-vacancy defect center in diamond 

The economic phase-covariant quantum cloning involves only three states of two-qubit system. Experimentally, we 
can encode those three states by three energy levels in a specified physical system. The experimen t al im plementation 
of phase-covariant quantum cloning by this scheme is realized in solid state system ( Pan et all . l201ll ). This solid 



system is the nitrogen-vacancy (NV) defect center in diamond. The structure of NV center in diamond is that a 
carbon atom is replaced by a nitrogen atom and additionally a vacancy is located in a nearby lattice site. The NV 
center is negative charged and can provide three states of the electronic spin one. Those three states correspond to 
zero magnetic moment {iris — 0) with a 2.87-GHz zero field splitting, two magnetic sub-levels induced by external 
magnetic field corresponding to = ±f . The experimental samples of diamond can be bulk or nanodiamond. The 
electronic spin in NV center of diamond can be individually addressed by using confocal microscopy so that we can 
control it exactly, however, ensemble of NV centers can also be well controlled. The NV center can be initialized to 
state rris = polarization by a continuous 532nm laser excitation. 

The superposed states of rus = with = ±1 are prepared by resonating microwaves depending on the duration 
time determined by their corresponding Rabi oscillations. The microwave radiation is sent out by a copper wire of 20 
/im diameter placed with a distance of 20 /im from the NV center. The Rabi oscillations corresponding to different 
microwave frequencies show that the prepared states are superposed states in quantum mechanics. The resonating 
frequencies of the controlling microwaves are determined by the electronic-spin-resonating (ESR) spectrum of the NV 
center obtained by frequency continuously changing. The readout of the electronic state is by Rabi oscillation, the 
measured value depends on the intensity of the florescence which corresponding to the amplitude of state = in 
the superposed state. The intensity of florescence is measured by single photon counting module connected with a 
multifunction data acquisition device. The main advantage of the NV center in diamond is its long coherence time 
which is long enough for spin electronic spin manipulation for various tasks in quantum information processing. 

One key point in precisely control the electron spin state is that it does not interact with environmental spin bath 
mainly constituted by nearby nuclear spins. The fact is that when the electron spin is in state with zero magnetic 
moment, — 0, it does not interact with the nuclear spin. If the electron spin is in either of the TOj = ±1 states, it 
is under the influence of the nearby nuclear spin. We may, on the one hand, use this coherent coupling for quantum 
information purposes, such as to generate entangled state or for quantum memory. On the other hand, it causes 
decoherence of the quantum state of the electron spin in the NV center. The interaction between the electron spin 
and a nearby nuclear spin in the NV center can be clearly shown by hyperfine structure in the ESR spectrum. 

The general spin Hamiltonian of the NV center consisting of an electron spin, S, coupled with nearby nuclear spins, 
Ife, is given as, 

Hspin = Hzf + HeZeeman + Hhf + Hq + HnZeeman , (404) 

where the terms in spin Hamiltonian describe: the electron spin zero field splitting, Hzf = SDS, the electron 
Zeeman interaction, HeZeeman = /3e^o.9eS, hyperfine interactions between the electron spin and nuclear spins Hhf = 
^^.SAfelfc, the quadrupole interactions for nuclei with / > 1/2, Hq = J2i^.>i'^kPkJk, and the nuclear Zeeman 

interactions, HnZeeman — —f^n'^k gn,kBoIk, also ge and gn are the g factors for the electron and nuclei respectively, 
Pe^Pg are Bohr magnetons for electron and nucleus, A and P are coupling tensors of hyperfine and quadrupole, and 
Bq is the applied magnetic field. 

In implementation of economic phase-covariant quantum cloning, we use four equatorial qubits equivalent to BB84 
states. However, according to result of minimal input set, it is also possible to check just three equatorial qubits 
( Jing et al\ . l2012f ). Since only three orthogonal states are involved in the economic phase-covariant cloning, the 



scheme is to use three physical states TOs = 0,TOs — ±1 to represent logic states of qubits. In the experimental 
scheme, the encode scheme is that: |10) — > TOs = 0, |00) and |01) correspond to nis = ±1 respectively. 

The implementation of phase cloning is in two steps. The first step is the initial state preparation which includes the 
input state preparation and cloning machine initialization. The experimental realization of this step is to prepare the 
logic qubits :^(|0) -I- e*'^|l))|0), which is to prepare physically a superposed state of two involved levels. It is realized 
by initializing the NV center, applying a 7r/2 pulse microwave. The second step of the phase cloning is to realize the 
quantum cloning transformation. According to the optimal transformation |00) |00),|10) ^d-'^'^) \^^))^ 
can realize it by applying another 7r/2 pulse microwave. So now the phase quantum cloning is realized experimentally. 
To readout the result, we can use the combination of two Rabi oscillations to find the exact value of the output state. 
Experimentally, it is shown that the experimental results are very close with theoretical expectations. In average, 
the experimental fidelity is about 85.2% which is very close to theoretical optimal bound 1/2-1- a/I/S ~ 85.4% and 
is clearly better than the universal quantum cloning. To run all values of the phase parameter, the active controlling 
of the phase parameter should be performed in experiment. This can also be realized experimentally by using two 
independently microwave sources. 



89 



E. Experimental developments 

By qu antum circuit method as shown in FIG. the universal cloning is realized by nuclear magnetic resonance 
(NMR) ((C ummins et all |2002|) . The phase-covariant cloning is also re alized in N MR system with input states ranging 
from the equator to the polar possessing an arbitrary phase par ameter (Du "oil. 12005) . The UQCM is realized exper- 



imentally by si ngle photon with different degrees of freedoms (|Huang et ai . 200 ll ) . stimulated emissi on with optica l 
fiber amplifier ( Fasel et a/.l . |2002| ). Also in optical system, the UQCM and the NOT gate are realized ( Martini et all . 
12004). Closely related with optical cloning, the experimental noiseless amplifie r for quantum light states is performed 



(jZavatta et gj.! . [201l[ ). The UQCM realization in cavity QED is proposed i n (Milman a^. . 120031 ). Experimental of 
various cloning machines in one set is performed recently in optics system ()Lemr et al. . 20121 ). 

Quantum cloning machine can be used for metrology. It is proposed theoretically and shown experimentally with an 
all-fiber experiment at telecommunications wavelengths that the op timal cloning machine can be used as a radiometer 
to measure the amount of radiated power (jSanguinetti et a^.l . [2010) . The electro-optic quantum memory f or light by 
atoms is demonstrated experimentally and compared with the limit of no-cloning limit ( Hetet et all . l2008l ) . 
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XII. APPENDIX 

For sequential quantum cloning machine of qudits, some detailed results are presented here. We shall provide the 
explicit form of matrix for different kinds of sequential UQCM. 



A. N ^ AI sequential UQCM of qubits. 

1. When n = 1: The upper left corner of l/I^l*^ is 



A[i]2 



while for ai > 3, set Vx]}^^ = -^^xy 

2. Case l<n<M-7V + m. 
For 1 < a„,Q!„_i < n, 



[i]i ^ ( \\\\ 

A[l]2 



M—m — n 



M-m—n+1 



(405) 



^ ' 7n(a.n — 1—1 



otherwise = ^Q„a„_i^- 

For 2 < a„ < (n -I- 1), 1 < Q!„_i < n, 



K1"q„_1 — '5q„(q„_i+1) 



M-m-r. 



■k) ™+<.„_i+fc 



M-m-n+l 



(406) 



\ k— — m 



for a„ = l,a„_i = n + 1, vi"a„_i = otherwise l4"a„_i = Sa„an-i^. 



V2- 



3. Case M-N + m<n<M-m. 
For 1 < a„, a„_i < (M - TV + m + 1), 



'-^M-n + l 



T/NO _ X 

{(Xn-l—l + k) p^+an — 1-1 + ^ 

^ k=—m 

For 2 < a„ < (M - iV + m + 1), 1 < a„_i < (M - TV + m), 



M— m — n 
k——m 



-i+fc 



M— m— ra+l 

^ '"^m(a„_i- 



fe=— m 



M—m—n+1 



\ E /5m(a„_i-l+fc)^^ 



f~im-\-k 

m+o;y^_i — 1+fc 
M 



otherwise, vi"a„_i = 0. 

4. Case M -m<n<M -I. 

(1). For (m + n + 1 - M) < a„, a„_i < (M - TV + m + 1), 



T/NO _ X 



M—ra—r 



E PI 



M—m—n+l 



l(a„_i-l + fe) + 



\ /^mCan-i-l + fe) „m+a„_i-l + fc 



For a„ = m + n - M, 1 < a„_i < (M — iV + m + 1), vi^Q„_i = 0. Otherwise, vi"a„_i = 
(2). For {m + n + 1 - M) < an < {M - N + m + 1), {m + n - M) < a„_i < (M - iV + m), 



*^a„a„_i "a;„(a„_i+l) 



M- 



fc=— m 



M—m—n+1 



^ fe=-m 

For a„ = m + n - M, 1 < Q!„_i < (M - TV + m + 1), Fi^^M-i = 0. Otherwise, viSn-i = 

5. Case n = M. 

(1). For (to + 1) < um, oiM-i < (M - iV + TO + 1), 



y[M]0 ^ r 



^m(aM-i — 1— m)' JVf 



^ Pm(aM_i-l-m)/'^M ^ P m{aM-\-m)l ^ M 

For ttM = TO, 1 < aM-1 < (M - + TO, + 1), vi^aM-i = 0. Otherwise, V^MaM-i = ^. 
(2). For (to + 1) < ttM < (M - iV + TO + 1), TO < au-i < {M - N + m), 



OlMOCM-l 



T^[M]1 _ r 



M 



\ '^m{aM-i — ^—m)' M ^m{aM-i — m)f 



For aM = TO, 1 < aM-i < (M - TV + to + 1), V^'jli^li'^.i = 0. Otherwise, vitfa„-i = ^umcm-i — 



V2- 
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6. Case n = M + 1. 

(1). For (to + 1) < ttM+i < {M - N + m - I + 1), {m + 2) < am+i-i < (JM - N + m - I + 2), 



Y[M+1]0 / "M+i-l - m - 1 



For OM+i = (M-7V + m-Z + 2), 1 < um+i-i < {M-N + m+1), yi^+,iV<-i = 0- Otherwise 

T^[M+i]0 _ . J_ 

•'aM+iOM+i-i — "(JM+jaM+i-i y^- 

(2). For (to + 1) < aM+i, aM+i-i < {M - N + m - I + 1), 



y[M+in i M-N-l-aM+i-i+m + 2 

For aM+i = {M - N + m-l + 2), 1 < um+i-i < {M-N + m+1), yi^+/iV<-i = 0- Otherwise 

yaM+iaM+i-i — "aM+iO!M+i-i 

Here we have got all the operators V^^^" iov < m < N — m. When N — m < m < N, one can find that 



B. N ^ M sequential UQCM of qudits 

1. Case n = 1. 



M-N-j' 



\ k=-j' 



mi^+i 



M 



where 0mj = ^/[]LC^^^Jc^,. 



p[l]ii — X 



2. Case 1< n < M - 1. 



M-N-j' 

E 



/?2 



i=l 



ji+ki+rui 



M- 



["-11 _ 



M-N-f 



i" 



«2 



i"c«„ "«nU +ein+l) ,[«-!] 



1 .iJi^+i 



ani" "an(i"+ei„ + i) Y ^ .[n- 
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3. Case n = M. 



■^j" — Pm{j'-m)- 



4. Case n = M + Z. 



[M-l] 



i 



d-l 
iM=0 



m{j" -m+ii j^+i) 



x.[M]iM _ If 



„+ij , [M-l] y 



\ 



M-N+m-j' d 
k=m—j' i=l 



[M+l-1] 



M—N+m—j" 



) k=m—j" i=l 



N- 



p[M+l]»„ _ . 1 / J,„ + i - "^»„. + l 



M-N-l + 1' 



With the above information, one can build the exphcit form of according to the 2-dimensional case, and the 

extension is direct. 
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